Bug#1028301: grub: grub-probe doesn't detect that file is on cryptfs on new installation

[Ben Hutchings]

Control: tag -1 upstream fixed-upstream patch

On Mon, 09 Jan 2023 12:12:19 +0100 Laurent Bigonville
<bigon at debian.org> wrote:
> Package: grub-common
> Version: 2.06-7
> Severity: serious
> File: /usr/sbin/grub-probe
> 
> Hello,
> 
> On a newly installed laptop, it seems that grub-probe is not able to
> detect that files are on an encrypted FS.
> 
> New laptop:
> 
> $ sudo grub-probe -t abstraction /usr/share/images/desktop-base/desktop-grub.png
> lvm
> 
> $ sudo lsblk
> NAME                      MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINTS
> nvme0n1                   259:0    0 476,9G  0 disk
> ├─nvme0n1p1               259:1    0   512M  0 part  /boot/efi
> ├─nvme0n1p2               259:2    0   488M  0 part  /boot
> └─nvme0n1p3               259:3    0   476G  0 part
>   └─nvme0n1p3_crypt       254:0    0 475,9G  0 crypt
>     ├─new_laptop--vg-root    254:1    0  27,9G  0 lvm   /
>     ├─new_laptop--vg-swap_1  254:2    0   976M  0 lvm   [SWAP]
>     ├─new_laptop--vg-home    254:3    0    40G  0 lvm   /home
>     └─new_laptop--vg-libvirt 254:4    0    60G  0 lvm   /var/lib/libvirt
[...]

I can reproduce this. What changed is that we now use LUKS2 instead of
LUKS1. Although GRUB has some LUKS2 support, it doesn't probe LUKS2
volumes automatically.

I found the 3 upstream commits that are enough to make the "grub-probe
..." line work and am attaching a debdiff with those.  I don't know
whether this is enough to completely fix the problem.

Ben.

-- 
Ben Hutchings
Never put off till tomorrow what you can avoid all together.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: grub2_2.06-8.2.debdiff
Type: text/x-patch
Size: 14555 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-grub-devel/attachments/20230303/64afdee8/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-grub-devel/attachments/20230303/64afdee8/attachment-0001.sig>