[pkg-cryptsetup-devel] Bug#970224: cryptsetup-suspend: suspending after resume requires unlocking cryptsetup
Damyan Ivanov
dmn at debian.org
Sun Sep 13 09:27:55 BST 2020
Package: cryptsetup-suspend
Version: 2:2.3.4-1+exp1
Severity: normal
Hi,
Thanks for cryptsetup-suspend, it is great!
In short, the glitch I am reporting is that there is no way to suspend the
laptop when it has resumed, but cryptsetup hasn't been ynlocked yet. Like, just
open and close the lid.
Imagine you are about to travel. Your laptop is suspended and thanks to
cryptdisk-suspend, this is safer than before. You decide to quickly hack on a
pet project and open the lid. The console asks you to unlock cryptsetup. Then
suddenly you realize that there is no time and the bus is about to leave very
soon, so you just close the lid, put the laptop in the bag and run. A couple of
hours of frantic bus riding and airport checks later you open the laptop in the
airport lounge to discover it has depleted the battery because it was on (not
suspended) during the ride.
(imagine a sad laptop image here)
I guess the unlock-on-resume environment is quite constrained and it has no
notion of "power management" etc, but still, the situation above is quite
possible and that possibility adds back some "suspend is tricky" attitude I was
happy to abandon.
Cheers,
dam
-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-5.8.0-1-amd64 root=/dev/mapper/dx1-root ro splash
-- /etc/crypttab
nvme0n1p7_crypt UUID=c01c04b2-9b86-4b32-afca-29dae4faa01e none luks
-- /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/mapper/dx1-root / ext4 discard,relatime,errors=remount-ro 0 1
# /boot was on /dev/nvme0n1p6 during installation
UUID=3e10543f-ba52-4adf-8bfb-6d84ba202bd4 /boot ext2 defaults 0 2
# /boot/efi was on /dev/nvme0n1p2 during installation
UUID=0EB6-FFB6 /boot/efi vfat umask=0077 0 1
#/dev/mapper/dx1-swap none swap sw,discard 0 0
none /tmp tmpfs nosuid,size=50%,mode=1777 0 0
-- lsmod
Module Size Used by
xt_nat 16384 0
veth 32768 0
snd_seq_dummy 16384 0
snd_hrtimer 16384 0
snd_seq 86016 1 snd_seq_dummy
snd_seq_device 16384 1 snd_seq
dm_snapshot 53248 0
dm_bufio 36864 1 dm_snapshot
ctr 16384 2
ccm 20480 6
bnep 28672 2
tun 57344 1
vboxnetadp 28672 0
vboxnetflt 32768 0
nf_conntrack_netlink 57344 0
xfrm_user 45056 1
xfrm_algo 16384 1 xfrm_user
cpufreq_userspace 20480 0
vboxdrv 532480 2 vboxnetadp,vboxnetflt
cpufreq_powersave 20480 0
cpufreq_conservative 16384 0
sha512_ssse3 49152 0
sha512_generic 16384 1 sha512_ssse3
xt_addrtype 16384 2
br_netfilter 28672 0
xt_CHECKSUM 16384 2
nft_chain_nat 16384 8
xt_MASQUERADE 20480 5
nf_nat 49152 3 xt_nat,nft_chain_nat,xt_MASQUERADE
overlay 143360 0
nft_counter 16384 56
nft_compat 20480 27
bridge 225280 1 br_netfilter
stp 16384 1 bridge
llc 16384 2 bridge,stp
uvcvideo 114688 0
videobuf2_vmalloc 20480 1 uvcvideo
videobuf2_memops 20480 1 videobuf2_vmalloc
videobuf2_v4l2 28672 1 uvcvideo
videobuf2_common 57344 2 videobuf2_v4l2,uvcvideo
videodev 274432 3 videobuf2_v4l2,uvcvideo,videobuf2_common
mc 61440 4 videodev,videobuf2_v4l2,uvcvideo,videobuf2_common
btusb 57344 0
btrtl 24576 1 btusb
btbcm 20480 1 btusb
btintel 32768 1 btusb
bluetooth 712704 11 btrtl,btintel,btbcm,bnep,btusb
jitterentropy_rng 16384 1
drbg 28672 1
ansi_cprng 16384 0
ecdh_generic 16384 1 bluetooth
ecc 36864 1 ecdh_generic
nf_tables 237568 196 nft_compat,nft_counter,nft_chain_nat
nfnetlink 16384 4 nft_compat,nf_conntrack_netlink,nf_tables
intel_rapl_msr 20480 0
joydev 28672 0
intel_rapl_common 32768 1 intel_rapl_msr
x86_pkg_temp_thermal 20480 0
intel_powerclamp 20480 0
snd_soc_skl 180224 0
coretemp 20480 0
snd_soc_hdac_hda 24576 1 snd_soc_skl
snd_hda_ext_core 36864 2 snd_soc_hdac_hda,snd_soc_skl
snd_soc_sst_ipc 20480 1 snd_soc_skl
kvm_intel 319488 0
snd_soc_sst_dsp 40960 1 snd_soc_skl
snd_soc_acpi_intel_match 45056 1 snd_soc_skl
snd_soc_acpi 16384 2 snd_soc_acpi_intel_match,snd_soc_skl
snd_soc_core 303104 2 snd_soc_hdac_hda,snd_soc_skl
zram 36864 4
zsmalloc 32768 1 zram
fuse 143360 5
snd_hda_codec_hdmi 73728 1
snd_compress 32768 1 snd_soc_core
snd_hda_codec_conexant 24576 1
kvm 831488 1 kvm_intel
snd_hda_codec_generic 98304 1 snd_hda_codec_conexant
snd_hda_intel 57344 1
iwlmvm 327680 0
irqbypass 16384 1 kvm
rapl 16384 0
snd_intel_dspcfg 24576 2 snd_hda_intel,snd_soc_skl
binfmt_misc 24576 1
mac80211 913408 1 iwlmvm
nls_ascii 16384 1
intel_cstate 20480 0
nls_cp437 20480 1
libarc4 16384 1 mac80211
intel_uncore 163840 0
snd_hda_codec 163840 5 snd_hda_codec_generic,snd_hda_codec_conexant,snd_hda_codec_hdmi,snd_hda_intel,snd_soc_hdac_hda
vfat 20480 1
iTCO_wdt 16384 0
fat 86016 1 vfat
efi_pstore 16384 0
iwlwifi 290816 1 iwlmvm
pcspkr 16384 0
intel_pmc_bxt 16384 1 iTCO_wdt
snd_hda_core 106496 8 snd_hda_codec_generic,snd_hda_codec_conexant,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_ext_core,snd_hda_codec,snd_soc_hdac_hda,snd_soc_skl
iTCO_vendor_support 16384 1 iTCO_wdt
serio_raw 20480 0
efivars 20480 1 efi_pstore
intel_wmi_thunderbolt 20480 0
snd_hwdep 16384 1 snd_hda_codec
wmi_bmof 16384 0
rmi_smbus 16384 0
watchdog 28672 1 iTCO_wdt
snd_pcm 135168 7 snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec,snd_compress,snd_soc_core,snd_soc_skl,snd_hda_core
cfg80211 888832 3 iwlmvm,iwlwifi,mac80211
rmi_core 86016 1 rmi_smbus
snd_timer 49152 3 snd_seq,snd_hrtimer,snd_pcm
mei_me 45056 0
ucsi_acpi 16384 0
typec_ucsi 36864 1 ucsi_acpi
mei 126976 1 mei_me
intel_xhci_usb_role_switch 16384 0
roles 16384 1 intel_xhci_usb_role_switch
intel_pch_thermal 16384 0
thinkpad_acpi 118784 0
typec 53248 1 typec_ucsi
nvram 16384 1 thinkpad_acpi
ledtrig_audio 16384 3 snd_hda_codec_generic,snd_hda_codec_conexant,thinkpad_acpi
snd 110592 15 snd_hda_codec_generic,snd_seq,snd_hda_codec_conexant,snd_seq_device,snd_hda_codec_hdmi,snd_hwdep,snd_hda_intel,snd_hda_codec,snd_timer,snd_compress,thinkpad_acpi,snd_soc_core,snd_pcm
tpm_crb 20480 0
soundcore 16384 1 snd
rfkill 28672 8 bluetooth,thinkpad_acpi,cfg80211
ac 16384 0
tpm_tis 16384 0
tpm_tis_core 28672 1 tpm_tis
tpm 73728 3 tpm_tis,tpm_crb,tpm_tis_core
evdev 28672 15
rng_core 16384 1 tpm
acpi_pad 28672 0
ip6table_raw 16384 1
nf_log_ipv6 16384 1
ip6t_REJECT 16384 5
nf_reject_ipv6 20480 1 ip6t_REJECT
ip6table_filter 16384 1
ip6_tables 36864 2 ip6table_filter,ip6table_raw
nf_conntrack_ftp 24576 2
xt_CT 16384 2
iptable_raw 16384 1
nf_log_ipv4 16384 1
nf_log_common 16384 2 nf_log_ipv4,nf_log_ipv6
xt_LOG 20480 2
ipt_REJECT 16384 5
nf_reject_ipv4 16384 1 ipt_REJECT
xt_tcpudp 20480 45
xt_conntrack 16384 14
nf_conntrack 176128 7 xt_conntrack,nf_nat,xt_nat,nf_conntrack_netlink,nf_conntrack_ftp,xt_CT,xt_MASQUERADE
nf_defrag_ipv6 24576 1 nf_conntrack
nf_defrag_ipv4 16384 1 nf_conntrack
iptable_filter 16384 1
nfsd 557056 13
auth_rpcgss 126976 1 nfsd
nfs_acl 16384 1 nfsd
lockd 122880 1 nfsd
grace 16384 2 nfsd,lockd
parport_pc 40960 0
ppdev 24576 0
lp 20480 0
parport 69632 3 parport_pc,lp,ppdev
sunrpc 569344 18 nfsd,auth_rpcgss,lockd,nfs_acl
efivarfs 16384 1
ip_tables 32768 2 iptable_filter,iptable_raw
x_tables 53248 17 ip6table_filter,xt_conntrack,ip6table_raw,iptable_filter,nft_compat,xt_LOG,xt_tcpudp,xt_addrtype,xt_CHECKSUM,xt_nat,ip6_tables,ipt_REJECT,xt_CT,iptable_raw,ip_tables,xt_MASQUERADE,ip6t_REJECT
autofs4 53248 2
ext4 786432 2
crc16 16384 2 bluetooth,ext4
mbcache 16384 1 ext4
jbd2 139264 1 ext4
btrfs 1523712 0
blake2b_generic 20480 0
zstd_decompress 86016 1 btrfs
zstd_compress 188416 1 btrfs
dm_crypt 53248 1
dm_mod 163840 8 dm_crypt,dm_snapshot,dm_bufio
raid10 65536 0
raid456 180224 0
async_raid6_recov 24576 1 raid456
async_memcpy 20480 2 raid456,async_raid6_recov
async_pq 20480 2 raid456,async_raid6_recov
async_xor 20480 3 async_pq,raid456,async_raid6_recov
async_tx 20480 5 async_pq,async_memcpy,async_xor,raid456,async_raid6_recov
xor 24576 2 async_xor,btrfs
raid6_pq 122880 4 async_pq,btrfs,raid456,async_raid6_recov
libcrc32c 16384 4 nf_conntrack,nf_nat,btrfs,raid456
crc32c_generic 16384 0
raid1 53248 0
raid0 24576 0
multipath 20480 0
linear 20480 0
md_mod 180224 6 raid1,raid10,raid0,linear,raid456,multipath
i915 2646016 8
crc32_pclmul 16384 0
crc32c_intel 24576 4
ghash_clmulni_intel 16384 0
i2c_algo_bit 16384 1 i915
rtsx_pci_sdmmc 32768 0
nvme 49152 3
mmc_core 188416 1 rtsx_pci_sdmmc
drm_kms_helper 262144 1 i915
aesni_intel 372736 6
xhci_pci 20480 0
libaes 16384 2 bluetooth,aesni_intel
crypto_simd 16384 1 aesni_intel
xhci_hcd 286720 1 xhci_pci
nvme_core 118784 5 nvme
cec 49152 2 drm_kms_helper,i915
t10_pi 16384 1 nvme_core
crc_t10dif 20480 1 t10_pi
drm 618496 7 drm_kms_helper,i915
cryptd 24576 3 crypto_simd,ghash_clmulni_intel
psmouse 180224 0
glue_helper 16384 1 aesni_intel
e1000e 307200 0
crct10dif_generic 16384 0
usbcore 323584 4 xhci_hcd,uvcvideo,btusb,xhci_pci
ptp 32768 1 e1000e
i2c_i801 32768 0
rtsx_pci 94208 1 rtsx_pci_sdmmc
pps_core 24576 1 ptp
i2c_smbus 20480 1 i2c_i801
crct10dif_pclmul 16384 1
crct10dif_common 16384 3 crct10dif_generic,crc_t10dif,crct10dif_pclmul
usb_common 16384 3 xhci_hcd,usbcore,uvcvideo
wmi 36864 2 intel_wmi_thunderbolt,wmi_bmof
i2c_hid 32768 0
battery 20480 1 thinkpad_acpi
hid 147456 1 i2c_hid
video 53248 2 thinkpad_acpi,i915
button 24576 0
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 5.8.0-1-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=bg_BG.UTF-8, LC_CTYPE=bg_BG.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages cryptsetup-suspend depends on:
ii cryptsetup-initramfs 2:2.3.4-1
ii initramfs-tools-core 0.138
ii kbd 2.2.0-1
ii libc6 2.31-3
ii libcryptsetup12 2:2.3.4-1
ii systemd 246.4-1
cryptsetup-suspend recommends no packages.
cryptsetup-suspend suggests no packages.
-- no debconf information
More information about the pkg-cryptsetup-devel
mailing list