[Bug 723406] New: encrypted /var is not accessed by initrd
https://bugzilla.novell.com/show_bug.cgi?id=723406 https://bugzilla.novell.com/show_bug.cgi?id=723406#c0 Summary: encrypted /var is not accessed by initrd Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: x86-64 OS/Version: openSUSE 11.4 Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: yoshi314@gmail.com QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20100101 Firefox/8.0 I've installed opensuse 11.4 on a following layout root is on ssd. it's a GPT partition layout /var is on hdd, as a lvm volume which is inside of encrypted PV. 11.4 installer opens encrypted device and discovers lvm volumes. Setup goes without issues. Generated initrd does not include luks support (i've filed a bug about that), and after rebuilding with mkinitrd -A fails to open the luks device - it claims that aes-cbc-essiv is not supported by kernel, even though the installer kernel had no issues opening it. I've tried updating to tumbleweed kernel. Regenerated the initrd (mkinitrd -A as before). Hit similar issue as before. Either mkinitrd -A does not include crypto modules, or there is something wrong with stock kernel configuration. Using a dracut generated initrd from custom built vanilla kernel works with this installation. Reproducible: Always Steps to Reproduce: 1. Install system in aforementioned partition setup 2. Rebuild initrd 3. enter luks password at boot, no lvm volumes are found 4. manual attempts to use luksOpen from recovery shell fail due to errors suggesting lacking crypto features 5. Try again with tumbleweed kernel and -A generated kernel 6. no lvm volumes are found; will check for more info booted with parameters luks=box luks_box=/dev/sda1 Actual Results: system waits for /var lvm volume and times out. eventual recovery shell or botched boot. Expected Results: normal system boot luks volume info : LUKS header information for /dev/sda1 Version: 1 Cipher name: aes Cipher mode: cbc-essiv:sha256 Hash spec: sha1 Payload offset: 4096 (....) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=723406 https://bugzilla.novell.com/show_bug.cgi?id=723406#c zj jia <zjjia@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zjjia@suse.com AssignedTo|bnc-team-screening@forge.pr |mmarek@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=723406 https://bugzilla.novell.com/show_bug.cgi?id=723406#c1 Michal Marek <mmarek@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |yoshi314@gmail.com --- Comment #1 from Michal Marek <mmarek@suse.com> 2011-10-12 15:50:53 UTC --- mkinitrd -A includes all storage and nic drivers. But mkinitrd is not supposed to mount /var in first place. Please explain your use case. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=723406 https://bugzilla.novell.com/show_bug.cgi?id=723406#c2 marcin kowalski <yoshi314@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|yoshi314@gmail.com | --- Comment #2 from marcin kowalski <yoshi314@gmail.com> 2011-10-14 09:07:28 UTC --- my belief is that mkinitrd -A includes all features available for initrd, like lvm and luks and corresponding kernel modules. with that in mind, i just cannot open my luks device from recovery shell running from that kind of initrd (or default initrd too). in other words, how should i create initrd that has lvm, luks and necessary crypto modules ? i thought that -A made a all-feature fallback initrd that should cover it. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=723406 https://bugzilla.novell.com/show_bug.cgi?id=723406#c3 --- Comment #3 from marcin kowalski <yoshi314@gmail.com> 2011-10-14 09:14:46 UTC --- i did not mean to say that initrd should mount /var. the problem is that luks volume apparently does not open after entering the correct password (no error is displayed on screen, but there were messages in dmesg about it when i retried it manually from recovery shell), and in turn lvm scan finds no volumes. and then init system fails to mount /var which causes entire boot process to drop to recovery shell. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=723406 https://bugzilla.novell.com/show_bug.cgi?id=723406#c4 Michal Marek <mmarek@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #4 from Michal Marek <mmarek@suse.com> 2013-09-30 08:09:04 UTC --- openSUSE <= 12.1 is no longer active. If you still can reproduce the problem with openSUSE 12.3 or Factory, please reopen the bug and change the product field accordingly. Sorry that I did not have time to address this bug. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com