[pkg-cryptsetup-devel] Bug#905574: linux-image-4.17.0-0.bpo.1-amd64: cryptsetup missing in intitramfs for kernel 4.17

[H.-Dirk Schmitt]

Am Dienstag, den 07.08.2018, 00:05 +0200 schrieb Guilhem Moulin:
> On Mon, 06 Aug 2018 at 21:15:10 +0800, Ben Hutchings wrote:
> > Sometimes driver modules have been reorganised and this has
> > resulted
> > in missing modules.  But this wouldn't explain other files being
> > missing.
> 
> cryptsetup's initramfs boot scripts should be present either way, but
> inclusion of the cryptsetup binaries (and crypto modules) depend on
> whether the hook detected that some device has to be unlocked at
> initramfs stage.  (Unless /etc/cryptsetup-initramfs/conf-hook
> contains
> "CRYPTSETUP=y", which indeed forces initramfs integration.)
> 
> Dirk, which “cryptsetup related parts” are missing from the 4.17 bpo
> initramfs with cryptsetup 2:1.7.3-4?  Does `update-initramfs -u`
> print
> any warning about unknown module and/or root FS?  Can you confirm
> that
> adding "CRYPTSETUP=y" to /etc/cryptsetup-initramfs/conf-hook (and
> compiling your initramfs image with MODULES="most" — the default)
> fixes
> the issue?
> 


Sorry for the late response.

The 1st tried mitigation to switch to cryptsetup from buster via
pinning was partly successful - booting in this configuration sometime
works - sometimes not.
So I reverted back to cryptsetup from stretch.

CRYPTSETUP=Y was traditionally since several years part of
/etc/initramfs-tools/initramfs.conf.
No I moved this to /etc/cryptsetup-initramfs/conf-hook as advised.

After the kernel upgrade to 4.17.17-1~bpo9+1 the problem seems to be
resolved on the 10 affected installations here with encrypted storage. 


I'm not understanding what has triggered the problem on my machines
with kernel 4.17.0-0.bpo.1. 
But with the current kernel package the problem seems to be vanished.

Best Regards,

H.-Dirk Schmitt


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20180907/9c54194e/attachment.sig>