Your message dated Mon, 18 Jun 2018 01:04:18 +0000
with message-id <[email protected]>
and subject line Bug#886007: fixed in cryptsetup 2:2.0.3-2
has caused the Debian Bug report #886007,
regarding Unify cryptsetup's crypttab(5) and systemd's
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
886007: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886007
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cryptsetup
Version: 2:1.7.3-4
Severity: normal
"man crypttab" does not describe/mention the "plain" option required to
automatically unlock a "plain" encrypted partition during boot resulting in
failure to automatically unlock the encrypted partition at boot and all
subsequent processing dependent upon the partition.
CRYPTTAB entry which worked:
# Unlock/Mount Encrypted data Partition sda4_data
data /dev/disk/by-id/ata-...-part4 /root/keys/data.key plain,cipher=serpent-
xts-plain64:sha256,size=256,noearly
The "plain," is undocumented but REQUIRED or the unlock fails during boot.
-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-4.9.0-4-amd64 root=/dev/mapper/sda3_crypt ro quiet
-- /etc/crypttab
# Unlock/Mount Encrypted Root Filesystem Partition sda3_crypt
sda3_crypt UUID=c171e730-6137-4b58-a511-9cea2de0c588 none luks
# Unlock/Mount Encrypted Swap Partition sda2_swap
swap /dev/disk/by-id/ata-TOSHIBA_MD04ACA400_15O3KFA0FSAA-part2 /dev/urandom
plain,swap,noearly
# Unlock/Mount Encrypted data Partition sda4_data
data /dev/disk/by-id/ata-TOSHIBA_MD04ACA400_15O3KFA0FSAA-part4
/root/keys/data.key plain,cipher=serpent-xts-plain64:sha256,size=256,noearly
# Do NOT Automatically Unlock Encrypted crypt Partition sda5_crypt
crypt /dev/disk/by-id/ata-TOSHIBA_MD04ACA400_15O3KFA0FSAA-part5
/root/keys/crypt.key plain,cipher=serpent-xts-plain64:sha256,size=256,noauto
# Do NOT Automatically Unlock Encrypted vault Partition sdb3_vault
vault /dev/disk/by-id/ata-TOSHIBA_HDWE160_47JIK4XWF56D-part3
/root/keys/vault.key plain,cipher=serpent-xts-plain64:sha256,size=256,noauto
-- /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
# Mount Encrypted Filesystem Partition
/dev/mapper/sda3_crypt / ext4 errors=remount-ro 0 2
# Mount Boot Partition
# /boot was on /dev/sda6 during installation
UUID=4d94d244-9aa9-4930-b8a7-be3138103d16 /boot ext2 defaults
0 1
# /boot/efi was on /dev/sda1 during installation
# Mount EFI Partition
UUID=B5F8-E04C /boot/efi vfat umask=0077 0 1
# Mount Encrypted Swap Partition
/dev/mapper/swap none swap sw 0 2
# Mount CD/Rom
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
# Mount Encrypted data Partition sda4
/dev/mapper/data /mnt/data ext4 auto,nofail,rw 0 2
# Mount Non-Backed Partition sdb1
/dev/disk/by-id/ata-TOSHIBA_HDWE160_47JIK4XWF56D-part1 /mnt/Non-Backed
ext4 auto,nofail,rw 0 1
# Do NOT Automount Archive Partition sdb2
/dev/disk/by-id/ata-TOSHIBA_HDWE160_47JIK4XWF56D-part2 /mnt/Archive
ext4 noauto,nofail,rw 0 1
# Do NOT Automount Encrypted crypt Partition sda5_crypt
/dev/mapper/crypt /mnt/crypt ext4 noauto,nofail,rw 0 2
# Do NOT Automount Encrypted vault Partition sdb3_vault
/dev/mapper/vault /mnt/vault ext4 noauto,nofail,rw 0 2
# Mount Music and Videos Directories
/mnt/Non-Backed/Music /media/Music none bind,nofail,ro 0 2
/mnt/Non-Backed/Videos /media/Videos none bind,nofail,ro 0 2
-- lsmod
Module Size Used by
fuse 98304 3
bnep 20480 2
nls_ascii 16384 1
nls_cp437 20480 1
vfat 20480 1
fat 69632 1 vfat
serpent_avx2 49152 0
serpent_avx_x86_64 49152 1 serpent_avx2
serpent_sse2_x86_64 53248 3
serpent_generic 32768 3
serpent_sse2_x86_64,serpent_avx_x86_64,serpent_avx2
xts 16384 1 serpent_sse2_x86_64
snd_hda_codec_hdmi 49152 1
snd_hda_codec_realtek 90112 1
snd_hda_codec_generic 69632 1 snd_hda_codec_realtek
intel_rapl 20480 0
joydev 20480 0
x86_pkg_temp_thermal 16384 0
intel_powerclamp 16384 0
coretemp 16384 0
hci_uart 98304 0
i2c_designware_platform 16384 0
snd_hda_intel 36864 6
btbcm 16384 1 hci_uart
snd_hda_codec 135168 4
snd_hda_intel,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek
kvm_intel 192512 0
i2c_designware_core 20480 1 i2c_designware_platform
btqca 16384 1 hci_uart
mxm_wmi 16384 0
snd_hda_core 81920 5
snd_hda_intel,snd_hda_codec,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek
ppdev 20480 0
btintel 16384 1 hci_uart
evdev 24576 10
snd_hwdep 16384 1 snd_hda_codec
snd_pcm 110592 4
snd_hda_intel,snd_hda_codec,snd_hda_core,snd_hda_codec_hdmi
kvm 589824 1 kvm_intel
bluetooth 552960 11 hci_uart,btintel,btqca,bnep,btbcm
irqbypass 16384 1 kvm
intel_cstate 16384 0
iTCO_wdt 16384 0
i915 1236992 14
drm_kms_helper 155648 1 i915
drm 360448 8 i915,drm_kms_helper
snd_timer 32768 1 snd_pcm
intel_uncore 118784 0
pcspkr 16384 0
iTCO_vendor_support 16384 1 iTCO_wdt
intel_lpss_acpi 16384 0
mei_me 36864 0
intel_rapl_perf 16384 0
efi_pstore 16384 0
idma64 20480 0
intel_lpss_pci 16384 0
rfkill 24576 4 bluetooth
serio_raw 16384 0
intel_lpss 16384 2 intel_lpss_pci,intel_lpss_acpi
parport_pc 28672 0
mfd_core 16384 1 intel_lpss
snd 86016 20
snd_hda_intel,snd_hwdep,snd_hda_codec,snd_timer,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec_realtek,snd_pcm
soundcore 16384 1 snd
efivars 20480 1 efi_pstore
shpchp 36864 0
sg 32768 0
mei 102400 1 mei_me
i2c_algo_bit 16384 1 i915
ie31200_edac 16384 0
edac_core 57344 1 ie31200_edac
battery 20480 0
parport 49152 2 parport_pc,ppdev
video 40960 1 i915
acpi_als 16384 0
wmi 16384 1 mxm_wmi
button 16384 1 i915
acpi_pad 24576 0
kfifo_buf 16384 1 acpi_als
industrialio 69632 2 acpi_als,kfifo_buf
efivarfs 16384 1
ip_tables 24576 0
x_tables 36864 1 ip_tables
autofs4 40960 2
ext4 585728 4
crc16 16384 2 bluetooth,ext4
jbd2 106496 1 ext4
crc32c_generic 16384 0
fscrypto 28672 1 ext4
ecb 16384 0
mbcache 16384 5 ext4
algif_skcipher 20480 0
af_alg 16384 1 algif_skcipher
dm_crypt 24576 3
dm_mod 118784 7 dm_crypt
sr_mod 24576 0
cdrom 61440 1 sr_mod
sd_mod 45056 8
hid_logitech_hidpp 28672 0
hid_logitech_dj 20480 0
usbhid 53248 0
crct10dif_pclmul 16384 0
crc32_pclmul 16384 0
crc32c_intel 24576 6
ghash_clmulni_intel 16384 0
aesni_intel 167936 8
aes_x86_64 20480 1 aesni_intel
lrw 16384 4
serpent_sse2_x86_64,serpent_avx_x86_64,serpent_avx2,aesni_intel
gf128mul 16384 2 lrw,xts
glue_helper 16384 4
serpent_sse2_x86_64,serpent_avx_x86_64,serpent_avx2,aesni_intel
ablk_helper 16384 4
serpent_sse2_x86_64,serpent_avx_x86_64,serpent_avx2,aesni_intel
cryptd 24576 6 ablk_helper,ghash_clmulni_intel,aesni_intel
psmouse 135168 0
e1000e 245760 0
ahci 36864 6
ptp 20480 1 e1000e
i2c_i801 24576 0
libahci 32768 1 ahci
xhci_pci 16384 0
pps_core 16384 1 ptp
i2c_smbus 16384 1 i2c_i801
xhci_hcd 188416 1 xhci_pci
libata 249856 2 ahci,libahci
r8169 81920 0
mii 16384 1 r8169
scsi_mod 225280 4 sd_mod,libata,sr_mod,sg
usbcore 249856 3 usbhid,xhci_pci,xhci_hcd
usb_common 16384 1 usbcore
fan 16384 0
thermal 20480 0
i2c_hid 20480 0
hid 122880 6
i2c_hid,usbhid,hid_logitech_dj,hid_logitech_hidpp
-- System Information:
Debian Release: 9.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages cryptsetup depends on:
ii cryptsetup-bin 2:1.7.3-4
ii debconf [debconf-2.0] 1.5.61
ii dmsetup 2:1.02.137-2
ii libc6 2.24-11+deb9u1
Versions of packages cryptsetup recommends:
ii busybox 1:1.22.0-19+b3
ii console-setup 1.164
ii initramfs-tools [linux-initramfs-tool] 0.130
ii kbd 2.0.3-2+b1
Versions of packages cryptsetup suggests:
ii dosfstools 4.1-1
pn keyutils <none>
ii liblocale-gettext-perl 1.07-3+b1
-- debconf information:
cryptsetup/prerm_active_mappings: true
--- End Message ---
--- Begin Message ---
Source: cryptsetup
Source-Version: 2:2.0.3-2
We believe that the bug you reported is fixed in the latest version of
cryptsetup, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jonas Meurer <[email protected]> (supplier of updated cryptsetup package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 18 Jun 2018 02:40:41 +0200
Source: cryptsetup
Binary: cryptsetup-run cryptsetup-bin cryptsetup-initramfs cryptsetup
libcryptsetup12 libcryptsetup-dev cryptsetup-udeb libcryptsetup12-udeb
Architecture: source amd64 all
Version: 2:2.0.3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Cryptsetup Team
<[email protected]>
Changed-By: Jonas Meurer <[email protected]>
Description:
cryptsetup - transitional dummy package for cryptsetup-{run,initramfs}
cryptsetup-bin - disk encryption support - command line tools
cryptsetup-initramfs - disk encryption support - initramfs integration
cryptsetup-run - disk encryption support - startup scripts
cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb)
libcryptsetup-dev - disk encryption support - development files
libcryptsetup12 - disk encryption support - shared library
libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb)
Closes: 714380 720952 782843 783194 784881 826122 826124 826127 849335 859953
873840 886007 891219 898495 901641 901713
Changes:
cryptsetup (2:2.0.3-2) unstable; urgency=medium
.
The "nights are long in summer" cryptsetup sprint release :-)
.
Guilhem and Jonas hacked together for three days (and nights), refactored
almost all of the cryptsetup packages, squashed (at least) 19 bugs and
started work on several new features. Yay!
.
[ Guilhem Moulin ]
* cryptsetup-initramfs: Demote "Depends: console-setup, kbd" to Recommends:
(Closes: #901641.)
* debian/initramfs/*-hook: complete refactoring. Common functions are now in
/lib/cryptsetup/functions (source-able from shell scripts).
(Closes: #784881.)
* debian/initramfs/cryptroot-hook:
+ Use sysfs(5) block (resp. fs) hierarchies to detect slave dm-crypt
devices such as LVM2 on top of LUKS (resp. multiple device filesystems
such as btrfs). This approach is more robust than parsing the output of
`lvs` or `btrfs filesystem`.
+ Export relevant crypttab(5) snippet (for devices that need to be
unlocked at initramfs stage) to the initramfs' /cryptroot/crypttab.
+ Print a warning inviting the user to uninstall 'cryptsetup-initramfs'
if 1/ the CRYPTSETUP configuration option is unset or null (the
default), and 2/ the hook didn't detect any device to be unlocked at
initramfs stage. The benefit is two-fold: it guides users through the
package split, and warns them that their system might not reboot if the
hook script didn't work properly.
* Remove the 'decrypt_openct' keyscript since openct was last seen in
oldoldstable, cf. #760258 (ROM).
* debian/initramfs/cryptroot-script: refactoring, using functions from
/lib/cryptsetup/functions. (Closes: #720952, #826124.)
+ One can disable the cryptsetup initramfs scripts for a particular boot
by passing "cryptopts=" as kernel boot argument. (Closes: #873840.)
+ No longer sleep for a full minute after exceeding the maximum number of
unlocking tries. (This was added in 2:1.7.3-2 as an attempt to mitigate
CVE-2016-4484.) Instead, the script sleeps for 1 second after each
failed
attempt in order to defeat online brute-force attacks. (Closes: #898495.)
* debian/README.initramfs: Remove mention that the initramfs scripts and the
crypsetup binary are using a different hash algorithm for plain dm-crypt
volumes. This is no longer true since 2:1.0.6~pre1+svn45-1, cf. #406317.
* debian/cryptdisks.functions:
+ Refactoring, using functions from /lib/cryptsetup/functions.
(Closes: #859953, #891219.)
+ Install to /lib/cryptsetup/cryptdisks-functions.
* crypttab(5):
+ Remove support for the 'precheck' option. The precheck for LUKS devices
is still hardcoded to `cryptsetup isLuks`; the script refuses to unlock
non-LUKS devices (plain dm-crypt and tcrypt devices) containing a known
filesystem (other that swap).
+ Don't ignore the 'plain' option: disable auto-detection and treat the
device as a plain dm-crypt device. (Closes: #886007.)
+ Add support for some option aliases to unify with systemd's crypttab(5)
options. Namely, 'read-only' is an alias for 'readonly', 'key-slot=' is
an alias for 'keyslot=', 'tcrypt-hidden' is an alias for 'tcrypthidden',
and 'tcrypt-veracrypt' is an alias for 'veracrypt'.
+ Add support for 'keyfile-size=' and 'keyfile-offset=' options.
(Closes: #849335.)
+ Source devices can now be specified using their PARTUUID or PARTLABEL,
similar to fstab(5).
* debian/scripts/cryptdisks_start: Add support for '-r'/'--readonly' switch
to setup readonly mappings. (Closes: #782843.)
* debian/scripts/cryptdisks_stop: Add support for closing multiple disks at
once. (Closes: #783194.)
.
[ Jonas Meurer ]
* debian/doc/crypttab.xml:
+ Add a section about the different crypttab formats of our package and
the systemd cryptsetup wrapper.
+ Document, which options are ignored by the initramfs scripts and which
are unsupported by the systemd implementation. (Closes: #714380)
+ Clarify documentation of option 'tries'. It also applies when using
keyscripts, not only with interactive passphrases. (Closes: #826127)
+ Make it obvious that in case a keyscript is configured, the third option
is passed as argument to the keyscript. Mention the optional requirement
to quote the value. (Closes: #826122)
+ Some minor wording improvements.
* debian/control, debian/combat: Bump debhelper compatibility level to 11.
* debian/rules:
+ Completely refactor the rules file, adapt to debhelper 11 style.
(Closes: #901713)
+ Run the upstream build-time testsuite thanks to dh_auto_test.
+ Move the luksformat script from cryptsetup-bin to cryptsetup-run.
+ Install the bug-script into all packages.
+ No longer install the sysvinit initscripts into cryptsetup-udeb.
+ Remove many old build and compile flags, debhelper takes care of most of
them nowadays.
Checksums-Sha1:
9e24a4d923ce4fac64bcc84c380c3b5862fda444 2876 cryptsetup_2.0.3-2.dsc
caa54865a0c2793f4f48c7ff711aec5d370ab91c 94488 cryptsetup_2.0.3-2.debian.tar.xz
4f9d4f236dab75639590e61cf52539c2eee4d0f8 165032
cryptsetup-bin-dbgsym_2.0.3-2_amd64.deb
1505a33b256470e7bdf9af23753e548e561ec373 242520
cryptsetup-bin_2.0.3-2_amd64.deb
fcd69e2941ee40c0a18e224b5be2b39e1af8eeaf 59828
cryptsetup-initramfs_2.0.3-2_all.deb
aa24f39bdf244315daddbf0c2891ae097895add6 17124
cryptsetup-run-dbgsym_2.0.3-2_amd64.deb
ace218419e640beb6f8955635829914fd7fd32ed 179024
cryptsetup-run_2.0.3-2_amd64.deb
9f516f0f88b5330a97b4642b35b17a19ca12feb8 48272
cryptsetup-udeb_2.0.3-2_amd64.udeb
1f4d2938dd38afeeeee5c6d710079be41e785b6d 45312 cryptsetup_2.0.3-2_all.deb
475e5563c9d2200d54fd72c9d35282f3bd338090 9428
cryptsetup_2.0.3-2_amd64.buildinfo
f57f744eb3887b549d29d4b831e02b21652653f2 60508
libcryptsetup-dev_2.0.3-2_amd64.deb
5ef052c82ec108cb4caebdf21fb11da680d06efb 339932
libcryptsetup12-dbgsym_2.0.3-2_amd64.deb
a826030e6885c6fe74756d76e52b87fc882e8116 128940
libcryptsetup12-udeb_2.0.3-2_amd64.udeb
bf147449d1cce8feb7b041bf948cf28611592594 173040
libcryptsetup12_2.0.3-2_amd64.deb
Checksums-Sha256:
f9e65284bfae2617feb4e9dd283bfd6234f12886a46bc0c7b2a78c5cf93f5d38 2876
cryptsetup_2.0.3-2.dsc
becf1f02162d8efbe84e26d819151bc49c611c065816708b41ddfc8d513040a6 94488
cryptsetup_2.0.3-2.debian.tar.xz
9f53d0529e41162fe2f5e69491bbe9a9419b6763e403acbd141503c38411b315 165032
cryptsetup-bin-dbgsym_2.0.3-2_amd64.deb
4b30027751df6994f341502f0584882819fd54b3ace92457b4958734bee83127 242520
cryptsetup-bin_2.0.3-2_amd64.deb
7ede88f94f8440b2748340ecf62efd527688573caf9d6dcce6892ccf444dd089 59828
cryptsetup-initramfs_2.0.3-2_all.deb
5d229256806d6e0e7a6cf0d0a87679d43d350652bbe98db3c5641b2d2f1ce553 17124
cryptsetup-run-dbgsym_2.0.3-2_amd64.deb
ed53ef51adb1aa4974330eaa062a27ff867058069e62a431d5e22dac74e19728 179024
cryptsetup-run_2.0.3-2_amd64.deb
00fe5f90512ed514f9e0de3ae4483d1f05e7a4f72e096a43ebe372ca59881872 48272
cryptsetup-udeb_2.0.3-2_amd64.udeb
d60fe40571001edf8d72198728f7c95ce57fb1c330ec606b601075f14a69cfe1 45312
cryptsetup_2.0.3-2_all.deb
affa5da486686a3e3c546e7ffcbea3fa3e22adc75049c9603eac44f8421c5b91 9428
cryptsetup_2.0.3-2_amd64.buildinfo
bb314080c38d8a85619ea1e66b0d2d5e0261f1dc42ca3936fc13ecb1209167bd 60508
libcryptsetup-dev_2.0.3-2_amd64.deb
0035b99a713d0bd19f7437f3e0b88956540bca802a119b19149acc0981cd0cd9 339932
libcryptsetup12-dbgsym_2.0.3-2_amd64.deb
c1844fe09ec3215a69ea322c13dc26c9bec39f07b55cbdf04987b27bb135365d 128940
libcryptsetup12-udeb_2.0.3-2_amd64.udeb
d84c3f02386bd5fed940f6022c0b95c23ae0f83c3ece78dca41269a1f01c8451 173040
libcryptsetup12_2.0.3-2_amd64.deb
Files:
fbf0675106eee4f5b591282d41fed37e 2876 admin optional cryptsetup_2.0.3-2.dsc
e8668c77734e77aedec6042640060733 94488 admin optional
cryptsetup_2.0.3-2.debian.tar.xz
3c73819417b4ea1bd0d3c2a9616bec11 165032 debug optional
cryptsetup-bin-dbgsym_2.0.3-2_amd64.deb
bfa863656e5e996225bd24d1a6f17057 242520 admin optional
cryptsetup-bin_2.0.3-2_amd64.deb
e60c9cb022547f7438023822d13facbd 59828 admin optional
cryptsetup-initramfs_2.0.3-2_all.deb
44c196d67f4f327d3de53198df072e15 17124 debug optional
cryptsetup-run-dbgsym_2.0.3-2_amd64.deb
bacc6514f686012ee21ead1a5f3abfb7 179024 admin optional
cryptsetup-run_2.0.3-2_amd64.deb
0e36b9f3de5fde610403c98e95c56ebb 48272 debian-installer optional
cryptsetup-udeb_2.0.3-2_amd64.udeb
6770011c4b325c93ace1010e1b013b96 45312 oldlibs optional
cryptsetup_2.0.3-2_all.deb
c1ab6cb0d4e35128243c7ef66038aed7 9428 admin optional
cryptsetup_2.0.3-2_amd64.buildinfo
c4354dcf198a962874426cc6cb0aee3f 60508 libdevel optional
libcryptsetup-dev_2.0.3-2_amd64.deb
2ea010d53fb99c127eb4546e84d0a671 339932 debug optional
libcryptsetup12-dbgsym_2.0.3-2_amd64.deb
fc7631f69f993d6eb8699771490cbc9c 128940 debian-installer optional
libcryptsetup12-udeb_2.0.3-2_amd64.udeb
ffdd73657eb4e400eaefafe9d3730bfa 173040 libs optional
libcryptsetup12_2.0.3-2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=nTPE
-----END PGP SIGNATURE-----
--- End Message ---
