[pkg-cryptsetup-devel] Bug#1141580: cryptsetup-initramfs: cryptroot-unlock non-interactive mode is buggy in case of trailing newline character

Vincent Lefevre vincent at vinc17.net
Mon Jul 6 16:34:57 BST 2026


Package: cryptsetup-initramfs
Version: 2:2.8.6-2
Severity: normal

/usr/share/doc/cryptsetup/README.Debian.gz says

 Or, using a local gpg-encrypted key file:

    gpg --decrypt ~/.luks/remote.key.gpg | ssh -TF ~/.luks/ssh.conf root at remote.system.com cryptroot-unlock

but in case the piped content is a text file (usually the case),
i.e. with a newline character after the passphrase, then one gets
an error, e.g.

Please unlock disk nvme0n1p3_crypt
cryptsetup: cryptsetup failed, bad password or options?

and "No key available with this passphrase." on the remote machine.

I could check with "echo -n <passphrase> | ssh ..." that the
passphrase is accepted (but on a machine with multiple users,
one should not use "echo" with the passphrase).

-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-7.1.3+deb14-amd64 root=/dev/mapper/disset--vg-root ro quiet

-- /etc/crypttab
nvme0n1p3_crypt UUID=4421770f-6357-493c-af2a-8b19010de3b1 none luks,discard

-- /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# systemd generates mount units based on this file, see systemd.mount(5).
# Please run 'systemctl daemon-reload' after making changes here.
#
# <file system> <mount point>   <type>  <options>       <dump>  <pass>
/dev/mapper/disset--vg-root /               ext4    errors=remount-ro 0       1
# /boot was on /dev/nvme0n1p2 during installation
UUID=0a9394c0-6d0e-422b-87e2-299911ec091a /boot           ext2    defaults        0       2
# /boot/efi was on /dev/nvme0n1p1 during installation
UUID=1375-93CC  /boot/efi       vfat    umask=0077      0       1
/dev/mapper/disset--vg-swap_1 none            swap    sw              0       0
[...]

-- lsmod
Module                  Size  Used by
qrtr                   57344  2
nls_ascii              12288  1
nls_cp437              16384  1
vfat                   28672  1
fat                   118784  1 vfat
snd_sof_pci_intel_tgl    16384  0
snd_sof_pci_intel_cnl    20480  1 snd_sof_pci_intel_tgl
snd_sof_intel_hda_generic    36864  2 snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl
soundwire_intel        86016  1 snd_sof_intel_hda_generic
snd_sof_intel_hda_sdw_bpt    20480  1 soundwire_intel
snd_sof_intel_hda_common   204800  4 snd_sof_intel_hda_sdw_bpt,snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl
snd_soc_hdac_hda       24576  1 snd_sof_intel_hda_common
snd_sof_intel_hda_mlink    49152  4 snd_sof_intel_hda_sdw_bpt,soundwire_intel,snd_sof_intel_hda_common,snd_sof_intel_hda_generic
snd_sof_intel_hda      24576  2 snd_sof_intel_hda_common,snd_sof_intel_hda_generic
soundwire_cadence      53248  1 soundwire_intel
snd_sof_pci            24576  3 snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl
snd_sof_xtensa_dsp     16384  1 snd_sof_intel_hda_generic
snd_sof               446464  6 snd_sof_intel_hda_sdw_bpt,snd_sof_pci,snd_sof_intel_hda_common,snd_sof_intel_hda_generic,snd_sof_intel_hda,snd_sof_pci_intel_cnl
intel_rapl_msr         24576  0
intel_rapl_common      53248  1 intel_rapl_msr
intel_uncore_frequency    12288  0
snd_sof_utils          16384  1 snd_sof
intel_uncore_frequency_common    16384  1 intel_uncore_frequency
snd_soc_acpi_intel_match   147456  3 snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl
snd_ctl_led            24576  0
intel_ifs              40960  0
snd_soc_acpi_intel_sdca_quirks    12288  1 snd_soc_acpi_intel_match
i10nm_edac             20480  0
soundwire_generic_allocation    20480  1 soundwire_intel
skx_edac_common        28672  1 i10nm_edac
snd_soc_sdw_utils     139264  1 snd_sof_intel_hda_generic
nfit                   86016  1 skx_edac_common
snd_soc_acpi           16384  2 snd_soc_acpi_intel_match,snd_sof_intel_hda_generic
x86_pkg_temp_thermal    16384  0
crc8                   12288  1 soundwire_cadence
intel_powerclamp       28672  0
snd_hda_codec_alc269   159744  1
soundwire_bus        1183744  4 soundwire_intel,snd_soc_sdw_utils,soundwire_generic_allocation,soundwire_cadence
coretemp               24576  0
snd_hda_codec_realtek_lib    69632  1 snd_hda_codec_alc269
snd_soc_sdca          126976  2 snd_soc_acpi_intel_sdca_quirks,soundwire_bus
snd_hda_scodec_component    20480  1 snd_hda_codec_alc269
snd_hda_codec_nvhdmi    16384  1
snd_hda_codec_generic   131072  2 snd_hda_codec_realtek_lib,snd_hda_codec_alc269
snd_soc_avs           245760  0
snd_hda_codec_hdmi     61440  1 snd_hda_codec_nvhdmi
kvm_intel             442368  0
snd_soc_hda_codec      24576  1 snd_soc_avs
snd_hda_intel          65536  0
snd_hda_ext_core       36864  7 snd_sof_intel_hda_sdw_bpt,snd_soc_avs,snd_soc_hda_codec,snd_sof_intel_hda_common,snd_soc_hdac_hda,snd_sof_intel_hda_mlink,snd_sof_intel_hda
snd_hda_codec         229376  10 snd_hda_codec_generic,snd_soc_avs,snd_hda_codec_hdmi,snd_soc_hda_codec,snd_hda_intel,snd_hda_codec_nvhdmi,snd_hda_codec_realtek_lib,snd_soc_hdac_hda,snd_hda_codec_alc269,snd_sof_intel_hda
snd_soc_core          458752  8 snd_soc_avs,snd_soc_hda_codec,soundwire_intel,snd_sof,snd_soc_sdca,snd_sof_intel_hda_common,snd_soc_sdw_utils,snd_soc_hdac_hda
kvm                  1531904  1 kvm_intel
snd_hda_core          159744  12 snd_hda_codec_generic,snd_soc_avs,snd_hda_codec_hdmi,snd_soc_hda_codec,snd_hda_intel,snd_hda_ext_core,snd_hda_codec,snd_sof_intel_hda_common,snd_hda_codec_realtek_lib,snd_soc_hdac_hda,snd_hda_codec_alc269,snd_sof_intel_hda
snd_intel_dspcfg       49152  5 snd_soc_avs,snd_hda_intel,snd_sof,snd_sof_intel_hda_common,snd_sof_intel_hda_generic
snd_compress           32768  2 snd_soc_avs,snd_soc_core
snd_intel_sdw_acpi     16384  2 snd_intel_dspcfg,snd_sof_intel_hda_generic
snd_pcm_dmaengine      20480  1 snd_soc_core
snd_hwdep              24576  1 snd_hda_codec
cxl_pci                28672  0
snd_pcm               217088  14 snd_soc_avs,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec,soundwire_intel,snd_sof,snd_soc_sdca,snd_sof_intel_hda_common,snd_compress,snd_sof_intel_hda_generic,snd_soc_core,snd_sof_utils,snd_hda_core,snd_pcm_dmaengine
cxl_mem                12288  1 cxl_pci
irqbypass              16384  1 kvm
dell_wmi               16384  0
dell_pc                12288  0
cxl_acpi               28672  0
dell_wmi_sysman        57344  0
rapl                   20480  0
snd_timer              53248  1 snd_pcm
dell_smbios            36864  2 dell_wmi,dell_pc
dell_wmi_ddv           28672  0
cxl_pmem               24576  1 cxl_acpi
pmt_telemetry          16384  0
intel_cstate           20480  0
dcdbas                 20480  1 dell_smbios
libnvdimm             262144  2 cxl_pmem,nfit
isst_if_mmio           12288  0
isst_if_mbox_pci       16384  0
battery                28672  1 dell_wmi_ddv
intel_uncore          290816  0
firmware_attributes_class    12288  1 dell_wmi_sysman
sparse_keymap          12288  1 dell_wmi
dell_wmi_descriptor    20480  2 dell_wmi,dell_smbios
pmt_discovery          24576  1 pmt_telemetry
wmi_bmof               12288  0
snd                   159744  15 snd_ctl_led,snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hwdep,snd_hda_intel,snd_hda_codec,snd_sof,snd_soc_sdca,snd_timer,snd_hda_codec_realtek_lib,snd_compress,snd_soc_sdw_utils,snd_hda_codec_alc269,snd_soc_core,snd_pcm
dax_hmem               20480  0
iaa_crypto             57344  0
dell_smm_hwmon         32768  0
pcspkr                 12288  0
mei_me                 57344  0
isst_if_common         28672  2 isst_if_mmio,isst_if_mbox_pci
pmt_class              20480  2 pmt_telemetry,pmt_discovery
intel_sdsi             20480  0
soundcore              16384  2 snd_ctl_led,snd
mei                   200704  1 mei_me
joydev                 32768  0
sg                     45056  0
evdev                  32768  13
binfmt_misc            28672  1
msr                    12288  0
i2c_dev                28672  0
configfs               65536  1
efi_pstore             12288  0
efivarfs               32768  1
autofs4                61440  2
ext4                 1257472  2
crc16                  12288  1 ext4
mbcache                20480  1 ext4
jbd2                  200704  1 ext4
crc32c_cryptoapi       12288  0
dm_crypt               69632  1
dm_mod                229376  10 dm_crypt
cdc_ncm                53248  0
cdc_ether              28672  1 cdc_ncm
usbnet                 65536  2 cdc_ncm,cdc_ether
r8152                 159744  0
mii                    16384  2 usbnet,r8152
hid_generic            12288  0
usbhid                 90112  0
hid                   282624  3 usbhid,snd_soc_sdca,hid_generic
nvme                   69632  3
nvme_core             249856  4 nvme
sr_mod                 28672  0
nvme_keyring           20480  1 nvme_core
cdrom                  86016  1 sr_mod
nvme_auth              32768  1 nvme_core
nouveau              3350528  8
mxm_wmi                12288  1 nouveau
drm_gpuvm              57344  1 nouveau
gpu_sched              69632  1 nouveau
drm_ttm_helper         20480  2 nouveau
ttm                   159744  2 drm_ttm_helper,nouveau
drm_exec               12288  2 drm_gpuvm,nouveau
i2c_algo_bit           16384  1 nouveau
drm_display_helper    311296  1 nouveau
cec                    81920  1 drm_display_helper
rc_core                81920  1 cec
drm_client_lib         16384  1 nouveau
drm_kms_helper        266240  4 drm_display_helper,drm_ttm_helper,drm_client_lib,nouveau
ahci                   53248  0
libahci                61440  1 ahci
xhci_pci               24576  0
drm                   925696  17 gpu_sched,drm_kms_helper,drm_exec,drm_gpuvm,drm_display_helper,drm_ttm_helper,drm_client_lib,ttm,nouveau
iTCO_wdt               16384  0
xhci_hcd              425984  1 xhci_pci
libata                495616  2 libahci,ahci
intel_pmc_bxt          16384  1 iTCO_wdt
idxd                  167936  1 iaa_crypto
aesni_intel           102400  1
rtsx_pci_sdmmc         40960  0
watchdog               53248  1 iTCO_wdt
video                  81920  2 dell_wmi,nouveau
atlantic              348160  0
usbcore               442368  7 xhci_hcd,usbnet,usbhid,cdc_ncm,xhci_pci,cdc_ether,r8152
mmc_core              290816  1 rtsx_pci_sdmmc
scsi_mod              339968  3 libata,sg,sr_mod
gf128mul               12288  1 aesni_intel
intel_vsec             28672  1 pmt_telemetry
idxd_bus               16384  2 idxd,iaa_crypto
i2c_i801               32768  0
e1000e                389120  0
wmi                    36864  10 dell_wmi_sysman,video,dell_wmi_ddv,dell_wmi,wmi_bmof,dell_smm_hwmon,dell_smbios,dell_wmi_descriptor,mxm_wmi,nouveau
pinctrl_alderlake      32768  0
macsec                 73728  1 atlantic
vmd                    28672  0
rtsx_pci              151552  1 rtsx_pci_sdmmc
button                 28672  1 nouveau
usb_common             20480  2 xhci_hcd,usbcore
scsi_common            16384  4 scsi_mod,libata,sg,sr_mod
i2c_smbus              20480  1 i2c_i801


-- System Information:
Debian Release: forky/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 7.1.3+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cryptsetup-initramfs depends on:
ii  busybox                                 1:1.38.0-1
ii  cryptsetup                              2:2.8.6-2
ii  debconf [debconf-2.0]                   1.5.92
ii  initramfs-tools [linux-initramfs-tool]  0.151

Versions of packages cryptsetup-initramfs recommends:
ii  console-setup  1.248
ii  kbd            2.9.0-1

cryptsetup-initramfs suggests no packages.

-- debconf information:
  cryptsetup-initramfs/prerm_active_mappings: true

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)



More information about the pkg-cryptsetup-devel mailing list