[Bug 230732] New: cryptsetup incompatible changes from 10.1 to 10.2 (LUKS not used)
https://bugzilla.novell.com/show_bug.cgi?id=230732 Summary: cryptsetup incompatible changes from 10.1 to 10.2 (LUKS not used) Product: openSUSE 10.2 Version: Final Platform: i586 OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: walter.haidinger@gmx.at QAContact: qa@suse.de After upgrading from 10.1 to 10.2 I was unable to access my dm_crypt partitions with the cryptsetup provided with 10.2. LUKS was not used. Note: Using cryptsetup of 10.1 (while running 10.2) works. Therefore I assume that there are some incompatible changes in cryptsetup. This really should be worth a note in the release notes, IMHO! I can see just two ways to resolve the problem for now: a. keep cryptsetup from 10.1 or b. recreate the encrypted partitions from scratch with 10.2 cryptsetup and restore from backup afterwards. Needless to say that the latter is a bit tedious... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230732 chrubis@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team- |mkoenig@novell.com |screening@forge.provo.novell| |.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230732 mkoenig@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |walter.haidinger@gmx.at ------- Comment #1 from mkoenig@novell.com 2007-01-08 08:52 MST ------- Please provide exact steps to reproduce where compatibility fails. There should not be any incompatible changes. I cannot reproduce this here, volumes created with 10.1 cryptsetup can be accessed with cryptsetup on 10.2. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230732 ------- Comment #2 from walter.haidinger@gmx.at 2007-01-08 10:43 MST ------- Under SuSE 10.1 I had the following cryptsetup config. The keys were files of 16k of random data, i.e. created with dd if=/dev/random of=home.key bs=4096 count=4 During boot, a custom script (/etc/init.d/boot.dmcrypt) ran the following command: cat home.key | cryptsetup -c aes -s 256 -h sha512 create home /dev/vg/crypt_home and subsequently mounted /dev/mapper/home (ext3). Please note that the encrypted device was an LVM logical volume too! After upgrading to 10.2, the (unmodified) script did not work anymore. The quick fix was to replace cryptsetup from 10.1. Do you want my /etc/init.d/boot.dmcrypt script? While I think about it, something comes to mind: I was not able to MOUNT the encrypted filesystem! Therefore, it may very well be the script did succeed to setup /dev/mapper/home but mount could not see a valid filesystem. So, the steps to reproduce would be: # cat test.key | cryptsetup101 -c aes -s 256 -h sha512 create test /dev/vg/crypt_test # mke2fs -j /dev/mapper/test # mount -t ext3 /dev/mapper/test /test # date > /test/blah # umount /test # cryptsetup101 remove test # cat test.key | cryptsetup102 -c aes -s 256 -h sha512 create test /dev/vg/crypt_test # mount -t ext3 /dev/mapper/test /test The last mount command should fail! I'll also try to reproduce and report back. However, in the meantime I've recreated the encrypted partitions from scratch with 10.2 cryptsetup, switching to LUKS on the fly. I'm still using the slightly modified boot.dmcrypt switch, though. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230732 walter.haidinger@gmx.at changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|walter.haidinger@gmx.at | ------- Comment #3 from walter.haidinger@gmx.at 2007-01-08 10:55 MST ------- Right, I just fetched cryptsetup from the 10.1 rpm and tried the command sequence above under 10.2. While 10.2 cryptsetup did setup /dev/mapper/test, it was bviously setup somehow differently because the last mount fails: # mount -t ext3 /dev/mapper/test /test mount: wrong fs type, bad option, bad superblock on /dev/mapper/test, missing codepage or other error In some cases useful info is found in syslog - try dmesg | tail or so The syslog says: Jan 8 18:51:01 banshee kernel: VFS: Can't find ext3 filesystem on dev dm-22. Some there _are_ some incompatible changes after all. Can you reproduce this too? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230732 mkoenig@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Comment #4 from mkoenig@novell.com 2007-01-09 04:02 MST ------- I see, there is a change in the passphrase/key reading function. But this affects the compatibility only as your usage of the key file is wrong. If you pipe the passphrase into cryptsetup you do not want to use the key file! There is a distinction between passphrase and key file. The passphrase should not contain newline characters, because cryptsetup stops reading then. If you want to use a binary key file, use the --key-file option. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=230732 ------- Comment #5 from walter.haidinger@gmx.at 2007-01-09 07:20 MST ------- Ah, passphrase handling from a terminal has changed from cryptsetup 10.1 to 10.2. I thought that was only the case if LUKS was used... Thanks for the clearification! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
participants (1)
-
bugzilla_noreply＠novell.com