[pkg-cryptsetup-devel] Bug#1093209: cryptsetup: cryptdisks_start fails if plymouth is installed

[Marc Lehmann]

Package: cryptsetup
Version: 2:2.6.1-4~deb12u2
Severity: normal

Dear Maintainer,

   * What led up to the situation?

I tried to use cryptdisks_start from an ssh session. crypttab contains
these options, so decrypt_keyctl is in use:

   initramfs,luks,keyscript=decrypt_keyctl,discard

   * What was the outcome of this action?

   Starting crypto disk...crypttd01 (starting)...add_key: Invalid argument
   Error adding passphrase to kernel keyring
   ...

   * What outcome did you expect instead?

I expected to be asked for my pasphrase and everything to go o form there.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

I looked at the script and straced it for a while, and it seems what happens is this:

decrypt_keyctl calls askpass. askpass looks if /bin/plymouth is execitable. If it is,
then it runs "plymouth ask-for-password <prompt>".

Unfortunately, this commands simply returns successfully without any
output. Either because I don't use plymouth, or because this was
long post-boot.

Removing plymouth made things work again.

*** End of the template - remove these template lines ***


-- Package-specific info:

-- System Information:
Debian Release: 12.8
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 'stable'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'oldstable-debug'), (500, 'unstable'), (500, 'testing'), (100, 'bookworm-fasttrack'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, x32

Kernel: Linux 6.1.0-28-amd64 (SMP w/28 CPU threads; PREEMPT)
Kernel taint flags: TAINT_USER, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cryptsetup depends on:
ii  cryptsetup-bin         2:2.6.1-4~deb12u2
ii  debconf [debconf-2.0]  1.5.82
ii  dmsetup                2:1.02.185-2
ii  libc6                  2.36-9+deb12u9

cryptsetup recommends no packages.

Versions of packages cryptsetup suggests:
ii  cryptsetup-initramfs    2:2.6.1-4~deb12u2
ii  dosfstools              4.2-1
ii  keyutils                1.6.3-2
ii  liblocale-gettext-perl  1.07-5

-- debconf information excluded