[pkg-cryptsetup-devel] Bug#896968: cryptsetup with luks2 not working on debian buster netinst

[Guilhem Moulin]

Control: tag -1 + d-i moreinfo

Hi,

On Thu, 26 Apr 2018 at 13:24:44 +0200, Christian Dietrich wrote:
> I'm trying to install Debian Buster to an LUKS2 encrypted partition:
>
> cryptsetup luksFormat /dev/sda1 -> works
> cryptsetup --type=luks2 luksFormat /dev/sda1 -> "libgcc_s.so.1 must be
> installed for pthread_cancel to work"

This is because LUKS2 defaults to the argon PBKDF algorithm for key
derivation, and libargon2 uses pthread_cancel.  (You can choose PBKDF2
instead, which is LUKS1's default PBKDF algorithm, by passing `--pbkdf
PBKDF2`.)  I don't think it makes sense to make the udeb depend on
libgcc1, given that LUKS2 isn't the default LUKS version yet.

> after manually installing "libgcc1" (libgcc_s.so.1):
> 
> cryptsetup --type=luks2 luksFormat /dev/sda1 -> works
> cryptsetup --type=luks2 open /dev/sda1 crypt -> doesnt work (nothing
> shows up at /dev/mapper/)

Is kernel userspace crypto available?  (Are the ‘algif_skcipher’ and
‘af_alg’ kernel modules loaded?)  If yes, please add `--debug` to run
cryptsetup in debug mode, and attach the debug output to your reply.

Cheers,
-- 
Guilhem.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20180426/dbe249f3/attachment.sig>