Your message dated Mon, 22 Jan 2018 00:05:00 +0000 with message-id <[email protected]> and subject line Bug#872342: fixed in cryptsetup 2:2.0.0-1 has caused the Debian Bug report #872342, regarding cryptsetup: initramfs ignore parameters offset and skip from /etc/crypttab in cryptroot to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 872342: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872342 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: cryptsetup Version: 2:1.7.3-4 Severity: important Tags: patch Dear Maintainer, I whould like to use skip and offset in /etc/crypttab for my root volume, but those options are ignored by update-initramfs. Ex crypttab: cryptsda /dev/sda /etc/crypttab.conf/cryptsda.key hash=plain,cipher=aes-cbc-essiv:sha256,size=256,offset=2048 should produce conf/conf.d/cryptroot in initramfs: target=cryptsda,source=/dev/sda,rootdev,lvm=vg00-root,hash=plain,cipher=aes-cbc-essiv:sha256,size=256,offset=2048,keyscript=cat,key=/cryptroot-keyfiles/cryptsda.key but generate: target=cryptsda,source=/dev/sda,rootdev,lvm=vg00-root,hash=plain,cipher=aes-cbc-essiv:sha256,size=256,keyscript=cat,key=/cryptroot-keyfiles/cryptsda.key It is part of BUG #714380, as a patch is provided, I created a seperat bug report. Regards Pascal -- Package-specific info: -- System Information: Debian Release: 9.1 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages cryptsetup depends on: ii cryptsetup-bin 2:1.7.3-4 ii debconf [debconf-2.0] 1.5.61 ii dmsetup 2:1.02.137-2 ii libc6 2.24-11+deb9u1 Versions of packages cryptsetup recommends: ii busybox 1:1.22.0-19+b3 ii console-setup 1.164 ii initramfs-tools [linux-initramfs-tool] 0.130 ii kbd 2.0.3-2+b1 Versions of packages cryptsetup suggests: ii dosfstools 4.1-1 pn keyutils <none> ii liblocale-gettext-perl 1.07-3+b1 -- debconf-show failed --- /usr/share/initramfs-tools/hooks/cryptroot 2017-08-15 22:21:12.173751572 +0200 +++ /usr/share/initramfs-tools/hooks/cryptroot 2017-08-15 22:44:38.926963077 +0200 @@ -394,6 +405,12 @@ unset LUKS_FOUND for opt in $rootopts; do case $opt in + skip=*) + OPTIONS="$OPTIONS,$opt" + ;; + offset=*) + OPTIONS="$OPTIONS,$opt" + ;; cipher=*) OPTIONS="$OPTIONS,$opt" ;; *** /usr/share/initramfs-tools/scripts/local-top/cryptroot 2017-08-15 22:58:03.215438789 +0200 --- /usr/share/initramfs-tools/scripts/local-top/cryptroot 2017-08-15 23:02:45.096369947 +0200 *************** parse_options() *** 62,67 **** --- 62,69 ---- # Defaults cryptcipher=aes-cbc-essiv:sha256 cryptsize=256 + cryptoffset="" + cryptskip="" crypthash=ripemd160 crypttarget=cryptroot cryptsource="" *************** parse_options() *** 80,85 **** --- 82,93 ---- local IFS=" ," for x in $cryptopts; do case $x in + offset=*) + cryptoffset=${x#offset=} + ;; + skip=*) + cryptskip=${x#skip=} + ;; hash=*) crypthash=${x#hash=} ;; *************** setup_mapping() *** 285,290 **** --- 293,304 ---- if [ -n "$cryptheader" ]; then cryptopen="$cryptopen --header=$cryptheader" fi + if [ -n "$cryptoffset" ]; then + cryptopen="$cryptopen --offset=$cryptoffset" + fi + if [ -n "$cryptskip" ]; then + cryptopen="$cryptopen --skip=$cryptskip" + fi if [ -n "$cryptkeyslot" ]; then cryptopen="$cryptopen --key-slot=$cryptkeyslot" fi
--- End Message ---
--- Begin Message ---Source: cryptsetup Source-Version: 2:2.0.0-1 We believe that the bug you reported is fixed in the latest version of cryptsetup, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Guilhem Moulin <[email protected]> (supplier of updated cryptsetup package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 22 Jan 2018 00:25:52 +0100 Source: cryptsetup Binary: cryptsetup cryptsetup-bin libcryptsetup12 libcryptsetup-dev cryptsetup-udeb libcryptsetup12-udeb Architecture: source amd64 Version: 2:2.0.0-1 Distribution: unstable Urgency: low Maintainer: Debian Cryptsetup Team <[email protected]> Changed-By: Guilhem Moulin <[email protected]> Description: cryptsetup - disk encryption support - startup scripts cryptsetup-bin - disk encryption support - command line tools cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb) libcryptsetup-dev - disk encryption support - development files libcryptsetup12 - disk encryption support - shared library libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb) Closes: 872342 877566 880750 883677 885435 Changes: cryptsetup (2:2.0.0-1) unstable; urgency=low . [ Guilhem Moulin ] * cryptsetup-bin: Install /usr/lib/tmpfiles.d/cryptsetup.conf to create the LUKS2 locking directory /run/lock/cryptsetup. For sysVinit, this is taken care of by the cryptdisks-early init file. * Remove debian/patches/Use-system-libargon2.patch (applied upstream). * debian/README.{source,gbp.conf}: Upgrade to latest upstream conventions. * debian/control: Bump Standards-Version to 4.1.3 (remove verbatim copy of CC0-1.0 license from debian/copyright). * debian/rules: Fix symlink target of libcryptsetup.so in libcryptsetup-dev package. Thanks to Alan Fung for the report and patch. (Closes: #885435.) * debian/initramfs/cryptroot-{hook,script}: Add support for 'skip' and 'offset' crypttab(5) options in the initramfs script. Thanks to Pascal Liehne for the report and patch. (Closes: #872342.) . [ Jonas Meurer ] * debian/initramfs/cryptopensc-*: Install required libs and config files for pcscd and use correct path to pcscd. Thanks to Martijn van de Streek for bugreport and patch. (Closes: #880750) . cryptsetup (2:2.0.0~rc1-1) experimental; urgency=low . * debian/rules: Compile with --enable-libargon2 to use system libargon2 instead of bundled version. * debian/control: Bump Standards-Version to 4.1.1 (no changes necessary). * debian/copyright: Update licensing information. . cryptsetup (2:2.0.0~rc0-1) experimental; urgency=low . * New upstream release 2.0.0 RC0 (closes: #877566). Highlights include: - Support for new on-disk LUKS2 format, offering authenticated disk encrption (EXPERIMENTAL), memory-hard PBKDF (argon2), kernel keyring for storage of key material, and more. - New CLI `integritysetup` which can setup standalone dm-integrity devices. - soname bump of libcryptsetup library. * Rename library package from libcryptsetup4 to libcryptsetup12. * Also remove deprecated upstart configuration files on upgrade and purge. (Closes: #883677) * debian/control: Bump Standards-Version to 4.1.0 (no changes necessary). * debian/*: Apply wrap-and-sort(1). * debian/copyright: Update copyright years. Checksums-Sha1: 5c9a0cd35c6e268ba04d42880fc85aec7b91ca5c 2746 cryptsetup_2.0.0-1.dsc 909419e809796b38137cfb126bcc47251b65b625 10057668 cryptsetup_2.0.0.orig.tar.gz 1c068e2beeb0051a187b51386885e3e1b23ca37b 95568 cryptsetup_2.0.0-1.debian.tar.xz e9d381bc9396eec8778cd96d339bc7f7faa06110 147668 cryptsetup-bin-dbgsym_2.0.0-1_amd64.deb b07a38e3bbbba7e6bd925bc3c70a03b5adbd2176 256732 cryptsetup-bin_2.0.0-1_amd64.deb dde1637cd371b760006f951b20360476503fb115 17092 cryptsetup-dbgsym_2.0.0-1_amd64.deb 74e773264510abe280607f675ac6a4fc509b0aaf 45532 cryptsetup-udeb_2.0.0-1_amd64.udeb b84f8029458f88a569c071d8776df9ef9d9831a3 8399 cryptsetup_2.0.0-1_amd64.buildinfo 3cef20c6e3852583848de1f79b3e4f1f04d2dccb 188112 cryptsetup_2.0.0-1_amd64.deb 9cdf2295fa4574a8652c4a21c2d31221a8fcd98d 60488 libcryptsetup-dev_2.0.0-1_amd64.deb 4d18992ca28c1aeb729d1d7448a72be601ff8218 325688 libcryptsetup12-dbgsym_2.0.0-1_amd64.deb a81398c94fcd3c31aea250bd82edae9e4e630b6b 124228 libcryptsetup12-udeb_2.0.0-1_amd64.udeb 2e2640638f6930d1da3a9cee18a727e4dc57f2d7 168824 libcryptsetup12_2.0.0-1_amd64.deb Checksums-Sha256: eaebfb6972bae38ef8df8d49af9be4a23159d65cf052c05f615aa20be2c22791 2746 cryptsetup_2.0.0-1.dsc b8a637cf898ab9d02b6bd93c51aa361f38efb2cef38223eaaae7d89ab2f34320 10057668 cryptsetup_2.0.0.orig.tar.gz 813f415631cfbac96e5c0b78210881d7bbadc144342c42f2f1eed1a2f62bd965 95568 cryptsetup_2.0.0-1.debian.tar.xz f242775ae3d4b46fe2a4ccedf066b7860e0ac3f9e9405cdbd320f41498902254 147668 cryptsetup-bin-dbgsym_2.0.0-1_amd64.deb b1c2a9384c91c9a00680767f0019d7d30adc910a29ff8587853171da729a907c 256732 cryptsetup-bin_2.0.0-1_amd64.deb 6033a3800b97fd8bf01e33cde1cdb3613fa58a65f01884a9e5acc4ce9997d00b 17092 cryptsetup-dbgsym_2.0.0-1_amd64.deb a5b11a459f1d44f6e9bdcaad0f2b03b31c95023750f18749d718f748f92b6acf 45532 cryptsetup-udeb_2.0.0-1_amd64.udeb 8419fdfef595c784475e85cfe887b3801af774bc9c3efd72c32a3322a3afb457 8399 cryptsetup_2.0.0-1_amd64.buildinfo b90d6c64b14608b3a961a97174f26ea4c1bc2df59c110523f308fa6d9e45018a 188112 cryptsetup_2.0.0-1_amd64.deb 8c824df2782e08c4d2007bb67af9a8d35b0625e40382e2e4e90b7bc72fc6da94 60488 libcryptsetup-dev_2.0.0-1_amd64.deb 0124afb6c974833a94c9d7de26eb82466448287ab4fcef7b092df816d2503909 325688 libcryptsetup12-dbgsym_2.0.0-1_amd64.deb 481543846ddf10936f4c3f39062bd29d6385e72848596f624b5f4c9c18dde43b 124228 libcryptsetup12-udeb_2.0.0-1_amd64.udeb ce73543d69fc6e9478e343870bbd340202ef1f5169adb027ad3b1b58a1c67f70 168824 libcryptsetup12_2.0.0-1_amd64.deb Files: 262d1877af13d7cbeee9615dfd69de52 2746 admin optional cryptsetup_2.0.0-1.dsc fb0f8071ae3c6367d757b11ca5863f98 10057668 admin optional cryptsetup_2.0.0.orig.tar.gz d17b5f6a8bf6f83f3db4ff3f314a925e 95568 admin optional cryptsetup_2.0.0-1.debian.tar.xz dad87e26bf363448596a4040d8560efa 147668 debug optional cryptsetup-bin-dbgsym_2.0.0-1_amd64.deb 89a69e514a9a13612244bddbcb78067d 256732 admin optional cryptsetup-bin_2.0.0-1_amd64.deb 6d60d1de74f249cbe158923f992f948e 17092 debug optional cryptsetup-dbgsym_2.0.0-1_amd64.deb 9b40c9629421981af19dcf2e742348fc 45532 debian-installer optional cryptsetup-udeb_2.0.0-1_amd64.udeb 2e4fd9e365eb47d5b8269913b04b84c9 8399 admin optional cryptsetup_2.0.0-1_amd64.buildinfo 04acc3f89afa169466bb80e008d12619 188112 admin optional cryptsetup_2.0.0-1_amd64.deb 940c3f0e24636001c745a8608761eac3 60488 libdevel optional libcryptsetup-dev_2.0.0-1_amd64.deb 9667a0684332f4f7964941bc5b59fdf9 325688 debug optional libcryptsetup12-dbgsym_2.0.0-1_amd64.deb 4835f032e1ba1090472251a80be7fb01 124228 debian-installer optional libcryptsetup12-udeb_2.0.0-1_amd64.udeb 691d346dd34fe53afa3da2770a230bd4 168824 libs optional libcryptsetup12_2.0.0-1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAlplJZAACgkQ05pJnDwh pVJuvA/8D/EdQTFuObrSBr/L1A1/PquGKhYTql1heRp7GXU/TMpdlol8PmzzXIr5 O75VYstk9hCI0WJl+5Wj1dnJ+gLKMh3Te3UjilXBebtJWTKsx8n6W29jrrQwlo+I kCyeWksfn6PGCmEfDueHbourmyrFV/NKIjllQt9sDw0guXyZxc0Z7cNijTRhNiOk QpWBQm24VhGvnwWGUFDMxvlo/KdrUa9zIRoEl7K05btW/MMYUrSlV6Oyb8EeQqrs 8Itu93VRP7AjwW144719AyJnXHffk8ESxmDlXfbfSYFVlpxeCGcJ/LAN4X+MPG91 HhAN8SKVvdvgdkeqR0gFnVMErJ7yYZiCSINGEXLFAokcCqDnOcyfWNrWlOtZcQTv 2eVVbAx1SkOVagXTOR2YpQ/bl0YqhWJIsDtD0MvMRxWyxutqOLPMEOI0Nl0DaLDl x6+dIbOEDHW/hCPWixGlf39ylG8Ofb1JvCsOlLVtF0AMGGQpBkFvtmlWevaKug2R +38/DMLcO4emFT35cg7HKRfma8ZpBANH8RX79Rcd0F71/lx3gE3KNj5spGJysy50 y7UFDKS+ilBlGYXgp3X08wGK+gu7BQgjPAlI6TFWNGnk6BddwxDVwS5IqyP5lgVn Mu2HSzAolamirBSJ/nAa6SmkuLQ8MNqgt1BcWMvryQl9EBhENxw= =LKGE -----END PGP SIGNATURE-----
--- End Message ---
