[Bug 765214] New: luks encryption from the "initrd" hangs.
https://bugzilla.novell.com/show_bug.cgi?id=765214 https://bugzilla.novell.com/show_bug.cgi?id=765214#c0 Summary: luks encryption from the "initrd" hangs. Classification: openSUSE Product: openSUSE 12.2 Version: Beta 1 Platform: i686 OS/Version: openSUSE 12.2 Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader AssignedTo: jsrain@suse.com ReportedBy: nrickert@ameritech.net QAContact: jsrain@suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20100101 Firefox/12.0 The beta1 system is up and mostly running. I have encrypted swap and "/home". I tried moving the crypto to the "initrd" by adding "initrd" as the 4th column in the "/etc/crypttab" entries. I then ran "mkinitrd". On boot: I am prompted for luks key. I enter the key. There is a message "opening encrypted /dev/sda10" (sorry, not the exact wording), and nothing proceeds beyond that point. Note that this is not a plymouth problem, as I have disabled boot splash. My best guess is that something required is missing from the "initrd". To recover from this, I booted DVD system to rescue mode, removed the "initrd" from the "crypttab" entries, and rebuilt "initrd". Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=765214 https://bugzilla.novell.com/show_bug.cgi?id=765214#c2 --- Comment #2 from Neil Rickert <nrickert@ameritech.net> 2012-06-05 21:05:01 UTC --- It looks as if I may have been a bit confused over this. As background, I have two encrypted partitions. They are "/dev/sda9" and "/dev/sda10". The first of those is a swap partition, while the second is "/home". For various reasons, I did another "mkinitrd" today. And I was paying more attention than before. It looks as if the decryption of "/dev/sda9" is being handled in the "initrd", even though I did not specify that in "crypttab". This is a change from 12.1, and does not match the man page for "crypttab". Presumably, it is being handled in "initrd" so that recovery from hibernation requires it. Nevertheless, entering "initrd" in crypttab for this partition should not cause a hang, so I think there is still a problem. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=765214 https://bugzilla.novell.com/show_bug.cgi?id=765214#c3 Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |nrickert@ameritech.net --- Comment #3 from Ludwig Nussel <lnussel@suse.com> 2012-06-11 16:26:33 CEST --- could you paste the working and and non working crypttab please? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=765214 https://bugzilla.novell.com/show_bug.cgi?id=765214#c4 Neil Rickert <nrickert@ameritech.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|nrickert@ameritech.net | --- Comment #4 from Neil Rickert <nrickert@ameritech.net> 2012-06-11 20:41:57 UTC --- "/home" is cr_sda10 "swap" is cr_sda9 --- Working crypttab --- cr_sda10 /dev/disk/by-id/ata-ST9500325AS_6VEGYD5L-part10 none none cr_sda9 /dev/disk/by-id/ata-ST9500325AS_6VEGYD5L-part9 none none --- end of paste in --- and --- non-working crypttab cr_sda10 /dev/disk/by-id/ata-ST9500325AS_6VEGYD5L-part10 none initrd cr_sda9 /dev/disk/by-id/ata-ST9500325AS_6VEGYD5L-part9 none initrd --- end of paste in --- The non-working version is what I had used for 12.1. If I use the first version of that file with 12.1, then recovery from hibernation does not work (the partition is decrypted too late), and I am prompted twice for the luks key. With the second version, recovery from hibernation works and I am only prompted once for a key (both partitions use the same key). I naturally tried the second version with 12.2, and had a hang during boot. But, as it turns out, with the first version hibernation works and I am only prompted once for the key. Presumably something has changed in 12.2, to move the decryption step earlier. That's fine, but using the second version of the crypttab file should not cause hangs. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=765214 https://bugzilla.novell.com/show_bug.cgi?id=765214#c5 --- Comment #5 from Neil Rickert <nrickert@ameritech.net> 2012-06-11 20:46:09 UTC --- That "non-working crypttab" shown above is only two lines long. It looks as if bugzilla formatting has added a linewrap to each line. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=765214 https://bugzilla.novell.com/show_bug.cgi?id=765214#c6 Ludwig Nussel <lnussel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WORKSFORME --- Comment #6 from Ludwig Nussel <lnussel@suse.com> 2012-06-12 17:35:52 CEST --- I cannot reproduce. A setup like that works just fine for me. The resume device is automatically included in initrd so no need to add the 'initrd' option explicitly. Note that instead of having several separate partitions with the same key it would be easier to use lvm logical volumes instead. That way you only need to unlock the lvm volume once to gain access to all volumes inside. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=765214 https://bugzilla.novell.com/show_bug.cgi?id=765214#c7 --- Comment #7 from Neil Rickert <nrickert@ameritech.net> 2012-06-12 22:43:46 UTC ---
Note that instead of having several separate partitions with the same key it would be easier to use lvm logical volumes instead.
I actually do that on my primary system (running 12.1). However, when testing (as with 12.2 Beta1), I vary the configuration. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com