Your message dated Mon, 30 Jul 2018 11:34:11 +0000 with message-id <e1fk6rh-000dyi...@fasolo.debian.org> and subject line Bug#904926: fixed in cryptsetup 2:2.0.3-7 has caused the Debian Bug report #904926, regarding `cryptroot-unlock` assumes non usrmerge layout and doesn't work with initramfs-tools 0.132 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 904926: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904926 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: cryptsetup-initramfs Version: 2:2.0.3-6 Severity: critical Justification: breaks the whole system Dear Maintainer, after installing updates today, I cannot unlock the cryptroot anymore. After sshing to the dropbear instance of the machine and starting cryptroot-unlock, the command responds with the error message: timeout waiting for askpass. askpass is installed in the initrd under /lib/cryptsetup (iirc). Logging into the machines remote console (done via spice) also fails, as I always get the error message that the password is wrong. I tried entering the password using US-keyboard layout, to no avail. I've had to boot into an older kernel, that kernels initramfs still works. The kernel where the cryptroot-unlock is not working is 4.17.0-1. The machine has a single disk with 2 partitions, vda1 being the unencrypted boot partition having the boot loader, kernel and initramfs. The second partition is the luks volume, having a single LVM volume group with two logical volumes (see fstab below, hostname redacted) I have booted into the older kernel and updated the 4.17.0-1 initramfs with update-initramfs -u That did not help, either. Regards, C. Dominik Bódi -- Package-specific info: -- /proc/cmdline BOOT_IMAGE=/vmlinuz-4.16.0-2-amd64 root=/dev/mapper/xxxxx-root ro elevator=noop ip=aaa.bbb.ccc.ddd::aaa.bbb.ccc.xxx:255.255.255.zzz::eth0:none quiet -- /etc/crypttab vda2_crypt UUID=aecd1a7c-efe5-44e5-a14a-74f1c8c3d046 none luks -- /etc/fstab # /etc/fstab: static file system information. # # Use 'blkid' to print the universally unique identifier for a # device; this may be used with UUID= as a more robust way to name devices # that works even if disks are added and removed. See fstab(5). # # <file system> <mount point> <type> <options> <dump> <pass> proc /proc proc defaults 0 0 /dev/mapper/xxxxx-root / xfs defaults 0 1 /dev/mapper/xxxxx-data /data xfs defaults 0 2 # /boot was on /dev/vda1 during installation /dev/vda1 /boot ext2 defaults 0 2 #/dev/mapper/odysseus-swap_1 none swap sw 0 0 /dev/scd0 /media/cdrom0 udf,iso9660 user,noauto 0 0 -- lsmod Module Size Used by ip6t_REJECT 16384 4 nf_reject_ipv6 16384 1 ip6t_REJECT ip6table_nat 16384 1 nf_nat_ipv6 16384 1 ip6table_nat ip6table_mangle 16384 1 ip6table_raw 16384 1 nf_conntrack_ipv6 16384 21 nf_defrag_ipv6 36864 1 nf_conntrack_ipv6 nf_log_ipv6 16384 5 ip6table_filter 16384 1 ip6_tables 32768 4 ip6table_mangle,ip6table_filter,ip6table_raw,ip6table_nat ipt_MASQUERADE 16384 1 nf_nat_masquerade_ipv4 16384 1 ipt_MASQUERADE xt_nat 16384 2 xt_recent 20480 2 xt_comment 16384 54 xt_set 16384 2 ip_set_hash_ip 36864 1 ip_set 45056 2 xt_set,ip_set_hash_ip xt_AUDIT 16384 0 ipt_REJECT 16384 4 nf_reject_ipv4 16384 1 ipt_REJECT xt_addrtype 16384 7 iptable_nat 16384 1 nf_nat_ipv4 16384 1 iptable_nat xt_mark 16384 2 iptable_mangle 16384 1 xt_tcpudp 16384 78 xt_CT 16384 36 iptable_raw 16384 1 xt_multiport 16384 10 nf_conntrack_ipv4 16384 35 nf_defrag_ipv4 16384 1 nf_conntrack_ipv4 xt_conntrack 16384 15 xt_NFLOG 16384 0 nfnetlink_log 20480 1 xt_NFLOG nf_log_ipv4 16384 6 nf_log_common 16384 2 nf_log_ipv6,nf_log_ipv4 xt_LOG 16384 11 nf_conntrack_sane 16384 4 nf_conntrack_netlink 49152 0 nfnetlink 16384 3 nfnetlink_log,ip_set,nf_conntrack_netlink nf_nat_tftp 16384 0 nf_nat_snmp_basic 16384 0 nf_conntrack_snmp 16384 3 nf_nat_snmp_basic nf_nat_sip 20480 0 nf_nat_pptp 16384 0 nf_nat_proto_gre 16384 1 nf_nat_pptp nf_nat_irc 16384 0 nf_nat_h323 20480 0 nf_nat_ftp 16384 0 nf_nat_amanda 16384 0 nf_nat 36864 12 nf_nat_pptp,nf_nat_proto_gre,xt_nat,nf_nat_h323,nf_nat_sip,nf_nat_irc,nf_nat_ftp,nf_nat_amanda,nf_nat_ipv6,nf_nat_masquerade_ipv4,nf_nat_ipv4,nf_nat_tftp nf_conntrack_tftp 16384 5 nf_nat_tftp nf_conntrack_sip 32768 5 nf_nat_sip nf_conntrack_pptp 16384 3 nf_nat_pptp nf_conntrack_proto_gre 16384 1 nf_conntrack_pptp nf_conntrack_netbios_ns 16384 2 nf_conntrack_broadcast 16384 2 nf_conntrack_snmp,nf_conntrack_netbios_ns nf_conntrack_irc 16384 3 nf_nat_irc nf_conntrack_h323 77824 9 nf_nat_h323 nf_conntrack_ftp 20480 5 nf_nat_ftp ts_kmp 16384 5 nf_conntrack_amanda 16384 5 nf_nat_amanda nf_conntrack 151552 31 nf_nat_pptp,nf_conntrack_sip,nf_conntrack_snmp,nf_conntrack_irc,xt_nat,nf_nat_h323,nf_conntrack_ipv6,nf_conntrack_ftp,nf_nat_snmp_basic,nf_nat_sip,nf_conntrack_ipv4,nf_conntrack_tftp,ipt_MASQUERADE,nf_nat_irc,nf_conntrack_pptp,nf_conntrack_amanda,nf_conntrack_broadcast,nf_nat_ftp,nf_conntrack_sane,nf_nat_amanda,nf_conntrack_netlink,nf_conntrack_netbios_ns,nf_conntrack_proto_gre,xt_CT,nf_nat_ipv6,nf_nat_masquerade_ipv4,nf_conntrack_h323,xt_conntrack,nf_nat_ipv4,nf_nat_tftp,nf_nat iptable_filter 16384 1 wireguard 229376 0 ip6_udp_tunnel 16384 1 wireguard udp_tunnel 16384 1 wireguard cpufreq_userspace 16384 0 cpufreq_powersave 16384 0 cpufreq_conservative 16384 0 ext4 720896 1 crc16 16384 1 ext4 mbcache 16384 1 ext4 jbd2 118784 1 ext4 fscrypto 32768 1 ext4 ecb 16384 0 snd_hda_codec_generic 86016 1 snd_hda_intel 45056 0 snd_hda_codec 151552 2 snd_hda_intel,snd_hda_codec_generic snd_hda_core 94208 3 snd_hda_intel,snd_hda_codec,snd_hda_codec_generic snd_hwdep 20480 1 snd_hda_codec snd_pcm 118784 3 snd_hda_intel,snd_hda_codec,snd_hda_core snd_timer 36864 1 snd_pcm qxl 77824 1 ttm 122880 1 qxl snd 94208 6 snd_hda_intel,snd_hwdep,snd_hda_codec,snd_timer,snd_hda_codec_generic,snd_pcm drm_kms_helper 196608 1 qxl sg 36864 0 pcspkr 16384 0 joydev 24576 0 evdev 28672 2 soundcore 16384 1 snd serio_raw 16384 0 drm 458752 4 qxl,ttm,drm_kms_helper virtio_console 32768 0 virtio_balloon 20480 0 button 16384 0 loop 32768 0 virtio_rng 16384 0 rng_core 16384 1 virtio_rng ip_tables 28672 4 iptable_mangle,iptable_filter,iptable_raw,iptable_nat x_tables 45056 24 xt_comment,xt_LOG,xt_AUDIT,xt_multiport,ipt_REJECT,xt_nat,iptable_mangle,ip_tables,iptable_filter,xt_set,xt_mark,xt_tcpudp,iptable_raw,ipt_MASQUERADE,ip6t_REJECT,ip6table_mangle,xt_recent,ip6table_filter,xt_addrtype,xt_CT,ip6table_raw,xt_conntrack,ip6_tables,xt_NFLOG autofs4 49152 2 xfs 1433600 2 libcrc32c 16384 3 nf_conntrack,xfs,nf_nat crc32c_generic 16384 0 algif_skcipher 16384 0 af_alg 28672 1 algif_skcipher hid_generic 16384 0 usbhid 57344 0 hid 135168 2 hid_generic,usbhid dm_crypt 40960 1 dm_mod 147456 9 dm_crypt sr_mod 28672 0 cdrom 69632 1 sr_mod ata_generic 16384 0 virtio_net 49152 0 virtio_blk 20480 3 crct10dif_pclmul 16384 0 crc32_pclmul 16384 0 crc32c_intel 24576 2 ghash_clmulni_intel 16384 0 pcbc 16384 0 aesni_intel 188416 3 aes_x86_64 20480 1 aesni_intel crypto_simd 16384 1 aesni_intel glue_helper 16384 1 aesni_intel cryptd 28672 4 crypto_simd,ghash_clmulni_intel,aesni_intel psmouse 172032 0 ata_piix 36864 0 floppy 86016 0 libata 278528 2 ata_piix,ata_generic scsi_mod 253952 3 libata,sr_mod,sg virtio_pci 28672 0 virtio_ring 28672 6 virtio_blk,virtio_net,virtio_rng,virtio_balloon,virtio_console,virtio_pci virtio 16384 6 virtio_blk,virtio_net,virtio_rng,virtio_balloon,virtio_console,virtio_pci ehci_pci 16384 0 uhci_hcd 49152 0 ehci_hcd 94208 1 ehci_pci usbcore 290816 4 usbhid,ehci_hcd,uhci_hcd,ehci_pci usb_common 16384 1 usbcore i2c_piix4 24576 0 -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.16.0-2-amd64 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages cryptsetup-initramfs depends on: ii busybox 1:1.27.2-3 ii cryptsetup-run 2:2.0.3-6 ii initramfs-tools [linux-initramfs-tool] 0.132 Versions of packages cryptsetup-initramfs recommends: ii console-setup 1.184 ii kbd 2.0.4-4 cryptsetup-initramfs suggests no packages. -- no debconf information
--- End Message ---
--- Begin Message ---Source: cryptsetup Source-Version: 2:2.0.3-7 We believe that the bug you reported is fixed in the latest version of cryptsetup, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 904...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Guilhem Moulin <guil...@debian.org> (supplier of updated cryptsetup package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Jul 2018 16:32:07 +0800 Source: cryptsetup Binary: cryptsetup-run cryptsetup-bin cryptsetup-initramfs cryptsetup libcryptsetup12 libcryptsetup-dev cryptsetup-udeb libcryptsetup12-udeb Architecture: source amd64 all Version: 2:2.0.3-7 Distribution: unstable Urgency: medium Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-de...@alioth-lists.debian.net> Changed-By: Guilhem Moulin <guil...@debian.org> Description: cryptsetup - transitional dummy package for cryptsetup-{run,initramfs} cryptsetup-bin - disk encryption support - command line tools cryptsetup-initramfs - disk encryption support - initramfs integration cryptsetup-run - disk encryption support - startup scripts cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb) libcryptsetup-dev - disk encryption support - development files libcryptsetup12 - disk encryption support - shared library libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb) Closes: 904926 Changes: cryptsetup (2:2.0.3-7) unstable; urgency=medium . * debian/scripts/gen-ssl-key: avoid storing temporary key file on disk. * debian/initramfs/*, debian/scripts/*: improve quoting. * debian/initramfs/cryptroot-unlock: Normalize paths before comparison. This fixes usage on initramfs images with an usrmerge layout, such as images made by mkinitramfs(8) from initramfs-tools-core 0.132. (Closes: #904926.) * debian/functions: crypttab_find_entry(), crypttab_foreach_entry(): return gracefully if $TABFILE doesn't exist. Checksums-Sha1: 376e7c995bfd525f5fd9469d8d197a1d8f089e0b 2800 cryptsetup_2.0.3-7.dsc 882d4cdd6e016e173f267ede51cf5daad2200492 97768 cryptsetup_2.0.3-7.debian.tar.xz 595c790323e78d79e320b655e4ae034094531788 193604 cryptsetup-bin-dbgsym_2.0.3-7_amd64.deb 0c4c5cd11edd18cda33fd616c739d634b35e579e 245688 cryptsetup-bin_2.0.3-7_amd64.deb bb5bc1b6a8eb82385e746fa01c268fcef937db25 64332 cryptsetup-initramfs_2.0.3-7_all.deb 6067bca57d66c534158134bcbe6a4dc75a194486 19380 cryptsetup-run-dbgsym_2.0.3-7_amd64.deb 8ae09aa3738b706dd79d6367955e47cd3648c8da 180256 cryptsetup-run_2.0.3-7_amd64.deb 73f8ea944c7b4f75387d43f2186b683692dd7a86 48604 cryptsetup-udeb_2.0.3-7_amd64.udeb ca7f14b0b27f7ae066f96c34a8f8550e6dd50b0b 48308 cryptsetup_2.0.3-7_all.deb 1b2f65b7801723b3e9fd370d8c075cb24e5cc0cd 9268 cryptsetup_2.0.3-7_amd64.buildinfo 03d6e093aeb29c58087ed728397ffd3deba2524f 63516 libcryptsetup-dev_2.0.3-7_amd64.deb fc2fcef6d536c5426bc0373f210da2ca3bdd0c20 407008 libcryptsetup12-dbgsym_2.0.3-7_amd64.deb 8f34af5d5bcf574925232e570934b226ff1c4e7d 130304 libcryptsetup12-udeb_2.0.3-7_amd64.udeb d8df7dc6bfc81053a70bb5ddaeeac38714245919 177208 libcryptsetup12_2.0.3-7_amd64.deb Checksums-Sha256: 4692345ac741aa8951d5f55df976f74c3d70f4cd958ca609881fe2dfe0e9edad 2800 cryptsetup_2.0.3-7.dsc e068855f75cf549a741695d0e921a0ecf9f6991cf3c9600403730ba622523b88 97768 cryptsetup_2.0.3-7.debian.tar.xz 5f5f8d7b165dc57f742a55e4ca68792618048117d35749d7a2ff4c0ccca7b88d 193604 cryptsetup-bin-dbgsym_2.0.3-7_amd64.deb 928886432fd0787e04240c77f755991455932cc6968323af5f1a7fc53aea48b5 245688 cryptsetup-bin_2.0.3-7_amd64.deb 874033a2f667c63a31b8e9ca23b1d1df4655fee8d608be8664cfd00ff5b80ac7 64332 cryptsetup-initramfs_2.0.3-7_all.deb 88f26ce242222cb460ee4ac230eda19dd8b060bf8a7c0cdae03a6f2b4a2b7979 19380 cryptsetup-run-dbgsym_2.0.3-7_amd64.deb 098db89a3a0e4190bdaeaf128a3182752b0636c95e5f8fd06beffefa64b60956 180256 cryptsetup-run_2.0.3-7_amd64.deb 8f283e3ada02c4ca9c3bc53bdbd325f93ef03620603c63448d1b7c5acbfa8d81 48604 cryptsetup-udeb_2.0.3-7_amd64.udeb 8cc23c6eb84610ace31c132ad9ae03d61a2e64b6adae61ace05510f23fb721e7 48308 cryptsetup_2.0.3-7_all.deb 74d4d003b5dce89153fc36d88c6c6efc30916f9d6f1168334a0f67d9e165ed73 9268 cryptsetup_2.0.3-7_amd64.buildinfo 06e4f7c4336a3ee36e321ee17124c11124608ffc131915ab6330bb0abea17c30 63516 libcryptsetup-dev_2.0.3-7_amd64.deb d4a517a0d9d62051b1e4042ab784e76c0ffa784f0131698139655afc6aad45a4 407008 libcryptsetup12-dbgsym_2.0.3-7_amd64.deb 461566b997bf039c41c260d1102e431f08c09451a2395d00b707eab9ae621afa 130304 libcryptsetup12-udeb_2.0.3-7_amd64.udeb 43d2e2cfc7e8af39484fb0e72e81d1203c04e04e008c3295ac687345cdce56d2 177208 libcryptsetup12_2.0.3-7_amd64.deb Files: e5a4408c49dd1719328bb65cd31980da 2800 admin optional cryptsetup_2.0.3-7.dsc 12128dc8260d57c76ee00e6a36ab2a24 97768 admin optional cryptsetup_2.0.3-7.debian.tar.xz 42212fe391dbbdd1b069ea365bf68d57 193604 debug optional cryptsetup-bin-dbgsym_2.0.3-7_amd64.deb 0dfd19a228b500422db5f4a8efc2d2d5 245688 admin optional cryptsetup-bin_2.0.3-7_amd64.deb 7d8e460f2a7a290ccfa0cf8248d54fff 64332 admin optional cryptsetup-initramfs_2.0.3-7_all.deb a97eb48f6a20ae0eb8dfd7a4ebb1d11c 19380 debug optional cryptsetup-run-dbgsym_2.0.3-7_amd64.deb cbd50dde956cfbd3f18cd357a7f35530 180256 admin optional cryptsetup-run_2.0.3-7_amd64.deb fc9b1e311e78604f0c982fd1652d6e80 48604 debian-installer optional cryptsetup-udeb_2.0.3-7_amd64.udeb 803237d85823fda1e6b34101cb2d34c9 48308 oldlibs optional cryptsetup_2.0.3-7_all.deb 1299bb46d3c523ebf4dce1601924c24c 9268 admin optional cryptsetup_2.0.3-7_amd64.buildinfo e5ce7507a25ff17cf5e1dc34fb902fb5 63516 libdevel optional libcryptsetup-dev_2.0.3-7_amd64.deb f20c575ad47d27374128090c8a706067 407008 debug optional libcryptsetup12-dbgsym_2.0.3-7_amd64.deb ea86fd150d98095a8baab3c504530e2f 130304 debian-installer optional libcryptsetup12-udeb_2.0.3-7_amd64.udeb 4d79af0e1f4c39f7a4e696493c7578ce 177208 libs optional libcryptsetup12_2.0.3-7_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAltezZ8ACgkQ05pJnDwh pVI8wxAAqkoQvwx2lCjVfpLHMvUcH3U3YNORGrQ0I7aoQP63Wn1iK1Tvuen1DX6/ zJO+AWU3DDjKNi7z7Mbk1l07HGGOgMOebMBGvP2yTNsW3WXGF2J1tzhB/nVs5zfw X2tKVvpJJRU1SguPyM3NWMvpWAjK42ep4FpY4aAjSIZsHhcoQrcckFO7UgGMnxj7 P+0kP5K55F3ICzAo+3tjhU0ySpZyFabd9dLJYVB6nb6IB+ydVCcdSU3yFoK4e6Ir vJ3ulo1ou/jrvTIHCF2XFoW4LoheOUdqXcijfUSZADsW1Fit6N1k4UhGl68Cr77S +GXSKE6bgwiM571gbk/Mm93b1lWBNc/RGysr9O0jDQItCbqSVC0KVul9J2zISWMQ aRSVLKWjYI25BKZLxXV1Bgrxi4IktHQlnoYdIZtqgO9NTaVxOS6g5Lwx0byVtSw0 tvJxvZtq0WLPf+l/IkxthERm70Sd4N7KhZC3s2IVJJy+xL6yUk4bC0uZD6wdZrIb zKN/vuxbNCwGUWfcsl16JbaHQf/JCipQzE4FasErPIidufYQRdIf6IgtCsbZMHri BJqn6VAV2AgcrtKjq/6WTy61vG/CA+8zsC4/XMbtJbnd4v2ch48zav2DXNNhDrqE VpAax2NH0JMRdJ6sKJhb6TBEJmrlZjNDGAILOD2O5DSO/o6LKxc= =uruE -----END PGP SIGNATURE-----
--- End Message ---
