Bug ID 1195886
Summary LUKS2 decryption with FIDO2 missing after kernel upgrade
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware x86-64
OS openSUSE Tumbleweed
Status NEW
Severity Major
Priority P5 - None
Component Kernel
Assignee kernel-bugs@opensuse.org
Reporter thomas.rahimi@mailbox.org
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

Hej,

after the latest kernel upgrade, which bumped my OpenSuse Tumbleweed from
5.16.5-1-default to 5.16.8-1-default, the LUKS2 decryption for my hard drive
fails to start. I have a LUKS2 encryption in place, where my FIDO2 key acts as
a key provider. Still, no input box or any other activity is displayed and my
computer is stuck. Boot works with the previous kernel version though. 
As described in your documentation regarding such setups, where /boot/ is not
encrypted, I altered a file under /etc/dracut.conf.d/ by adding the following
lines:

add_dracutmodules+=" systemd-udevd "

install_items+=" /usr/lib64/libfido2.so.* /usr/lib64/libcryptsetup.so.*
/usr/lib64/libcbor.so.* /usr/lib64/libhidapi-hidraw.so.* "

Please write me, if any additional information is needed. 

Kind regards

Thomas


You are receiving this mail because: