[pkg-cryptsetup-devel] Bug#883595: cryptsetup: Cannot mount encrypted root using XTS on kernel 4.10 onwards
Francis Russell
francis+dbts at unchartedbackwaters.co.uk
Tue Dec 5 14:16:42 UTC 2017
Package: cryptsetup
Version: 2:1.7.5-1
Severity: important
Apparently from Linux 4.10 onwards, the ecb module became a dependency
of xts[1]. I am running a custom kernel in which both XTS and ECB are
built as modules (kernel config attached for 4.14.3). However, ECB does
not appear in the initrd, causing the system to be unable to mount the
encrypted root.
It's unclear to me how this dependency should be picked up. The only
mention of ecb in lsmod (output attached for 4.14.3 kernel) is as
follows:
ecb 16384 2
Attempting to boot a locally built kernel from 4.10 sources onwards
(most recently tried 4.14.3) will fail to be able to mount encrypted
root unless I add ecb to /etc/initramfs-tool/modules. I am using
make-kpkg for all kernel builds.
This issue does not appear to occur with Debian's own kernels, perhaps
because something else is pulling in the ecb dependency when building
the initrd.
[1] https://www.spinics.net/lists/stable/msg160678.html
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (500, 'testing'), (50, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.14.3 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages cryptsetup depends on:
ii cryptsetup-bin 2:1.7.5-1
ii debconf [debconf-2.0] 1.5.65
ii dmsetup 2:1.02.145-4.1
ii libc6 2.25-2
Versions of packages cryptsetup recommends:
ii busybox 1:1.27.2-2
ii console-setup 1.172
ii initramfs-tools [linux-initramfs-tool] 0.130
ii kbd-compat [kbd] 2:0.2.3-73
Versions of packages cryptsetup suggests:
ii dosfstools 4.1-1
pn keyutils <none>
ii liblocale-gettext-perl 1.07-3+b3
-- debconf information excluded
-------------- next part --------------
A non-text attachment was scrubbed...
Name: config.gz
Type: application/gzip
Size: 33478 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-cryptsetup-devel/attachments/20171205/81b68f64/attachment.bin>
-------------- next part --------------
Module Size Used by
tun 32768 2
vboxpci 24576 0
vboxnetadp 28672 0
vboxnetflt 28672 0
vboxdrv 430080 3 vboxnetadp,vboxnetflt,vboxpci
ctr 16384 6
ccm 20480 9
bnep 20480 2
cpufreq_userspace 16384 0
cpufreq_conservative 16384 0
cpufreq_powersave 16384 0
binfmt_misc 20480 1
nls_iso8859_1 16384 1
nls_cp437 20480 1
vfat 20480 1
fat 61440 1 vfat
fuse 94208 3
crc32c_generic 16384 1
btrfs 1036288 0
xor 24576 1 btrfs
zstd_decompress 86016 1 btrfs
zstd_compress 163840 1 btrfs
xxhash 16384 2 zstd_compress,zstd_decompress
raid6_pq 114688 1 btrfs
btusb 40960 0
btrtl 16384 1 btusb
btbcm 16384 1 btusb
btintel 16384 1 btusb
joydev 20480 0
uvcvideo 81920 0
videobuf2_vmalloc 16384 1 uvcvideo
videobuf2_memops 16384 1 videobuf2_vmalloc
videobuf2_v4l2 24576 1 uvcvideo
videobuf2_core 40960 2 uvcvideo,videobuf2_v4l2
bluetooth 339968 26 btrtl,btintel,bnep,btbcm,btusb
ecdh_generic 24576 1 bluetooth
nvidia 10559488 31
kvm_intel 192512 0
arc4 16384 2
iwldvm 172032 0
kvm 569344 1 kvm_intel
mac80211 606208 1 iwldvm
irqbypass 16384 1 kvm
pcspkr 16384 0
psmouse 90112 0
efi_pstore 16384 0
efivars 20480 1 efi_pstore
sr_mod 24576 0
iwlwifi 262144 1 iwldvm
cdrom 36864 1 sr_mod
sg 32768 0
snd_hda_codec_hdmi 45056 2
snd_hda_codec_realtek 90112 1
snd_hda_codec_generic 69632 1 snd_hda_codec_realtek
sky2 57344 0
lpc_ich 24576 0
mfd_core 16384 1 lpc_ich
snd_hda_intel 36864 4
snd_hda_codec 114688 4 snd_hda_intel,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek
snd_hwdep 16384 1 snd_hda_codec
snd_hda_core 69632 5 snd_hda_intel,snd_hda_codec,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek
cfg80211 593920 3 iwlwifi,mac80211,iwldvm
snd_pcm_oss 45056 0
snd_mixer_oss 24576 1 snd_pcm_oss
rfkill 24576 5 bluetooth,cfg80211
intel_agp 20480 0
ac 16384 0
snd_pcm 90112 5 snd_pcm_oss,snd_hda_intel,snd_hda_codec,snd_hda_core,snd_hda_codec_hdmi
snd_timer 32768 1 snd_pcm
battery 20480 0
video 40960 0
intel_gtt 20480 1 intel_agp
snd 73728 18 snd_pcm_oss,snd_hda_intel,snd_hwdep,snd_mixer_oss,snd_hda_codec,snd_timer,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek,snd_pcm
soundcore 16384 1 snd
button 16384 0
acpi_cpufreq 16384 1
i2c_i801 24576 0
coretemp 16384 0
loop 28672 0
ip_tables 24576 0
x_tables 32768 1 ip_tables
ipv6 405504 60
autofs4 28672 2
ext4 606208 4
crc16 16384 2 bluetooth,ext4
mbcache 16384 1 ext4
jbd2 98304 1 ext4
fscrypto 28672 1 ext4
aes_x86_64 20480 9
dm_crypt 32768 1
dm_mod 114688 16 dm_crypt
dax 20480 1 dm_mod
ecb 16384 2
xts 16384 1
sd_mod 45056 5
uas 24576 0
usb_storage 61440 5 uas
ahci 36864 0
libahci 32768 1 ahci
libata 233472 2 ahci,libahci
evdev 20480 20
scsi_mod 208896 6 sd_mod,usb_storage,libata,uas,sr_mod,sg
fan 16384 0
ehci_pci 16384 0
uhci_hcd 32768 0
ehci_hcd 53248 1 ehci_pci
More information about the pkg-cryptsetup-devel
mailing list