Your message dated Mon, 6 Jul 2026 17:52:04 +0200
with message-id <[email protected]>
and subject line Re: Bug#1141580: cryptsetup-initramfs: cryptroot-unlock 
non-interactive mode is buggy in case of trailing newline character
has caused the Debian Bug report #1141580,
regarding cryptsetup-initramfs: cryptroot-unlock non-interactive mode is buggy 
in case of trailing newline character
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1141580: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141580
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cryptsetup-initramfs
Version: 2:2.8.6-2
Severity: normal

/usr/share/doc/cryptsetup/README.Debian.gz says

 Or, using a local gpg-encrypted key file:

    gpg --decrypt ~/.luks/remote.key.gpg | ssh -TF ~/.luks/ssh.conf 
[email protected] cryptroot-unlock

but in case the piped content is a text file (usually the case),
i.e. with a newline character after the passphrase, then one gets
an error, e.g.

Please unlock disk nvme0n1p3_crypt
cryptsetup: cryptsetup failed, bad password or options?

and "No key available with this passphrase." on the remote machine.

I could check with "echo -n <passphrase> | ssh ..." that the
passphrase is accepted (but on a machine with multiple users,
one should not use "echo" with the passphrase).

-- Package-specific info:
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-7.1.3+deb14-amd64 root=/dev/mapper/disset--vg-root ro quiet

-- /etc/crypttab
nvme0n1p3_crypt UUID=4421770f-6357-493c-af2a-8b19010de3b1 none luks,discard

-- /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# systemd generates mount units based on this file, see systemd.mount(5).
# Please run 'systemctl daemon-reload' after making changes here.
#
# <file system> <mount point>   <type>  <options>       <dump>  <pass>
/dev/mapper/disset--vg-root /               ext4    errors=remount-ro 0       1
# /boot was on /dev/nvme0n1p2 during installation
UUID=0a9394c0-6d0e-422b-87e2-299911ec091a /boot           ext2    defaults      
  0       2
# /boot/efi was on /dev/nvme0n1p1 during installation
UUID=1375-93CC  /boot/efi       vfat    umask=0077      0       1
/dev/mapper/disset--vg-swap_1 none            swap    sw              0       0
[...]

-- lsmod
Module                  Size  Used by
qrtr                   57344  2
nls_ascii              12288  1
nls_cp437              16384  1
vfat                   28672  1
fat                   118784  1 vfat
snd_sof_pci_intel_tgl    16384  0
snd_sof_pci_intel_cnl    20480  1 snd_sof_pci_intel_tgl
snd_sof_intel_hda_generic    36864  2 
snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl
soundwire_intel        86016  1 snd_sof_intel_hda_generic
snd_sof_intel_hda_sdw_bpt    20480  1 soundwire_intel
snd_sof_intel_hda_common   204800  4 
snd_sof_intel_hda_sdw_bpt,snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl
snd_soc_hdac_hda       24576  1 snd_sof_intel_hda_common
snd_sof_intel_hda_mlink    49152  4 
snd_sof_intel_hda_sdw_bpt,soundwire_intel,snd_sof_intel_hda_common,snd_sof_intel_hda_generic
snd_sof_intel_hda      24576  2 
snd_sof_intel_hda_common,snd_sof_intel_hda_generic
soundwire_cadence      53248  1 soundwire_intel
snd_sof_pci            24576  3 
snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl
snd_sof_xtensa_dsp     16384  1 snd_sof_intel_hda_generic
snd_sof               446464  6 
snd_sof_intel_hda_sdw_bpt,snd_sof_pci,snd_sof_intel_hda_common,snd_sof_intel_hda_generic,snd_sof_intel_hda,snd_sof_pci_intel_cnl
intel_rapl_msr         24576  0
intel_rapl_common      53248  1 intel_rapl_msr
intel_uncore_frequency    12288  0
snd_sof_utils          16384  1 snd_sof
intel_uncore_frequency_common    16384  1 intel_uncore_frequency
snd_soc_acpi_intel_match   147456  3 
snd_sof_intel_hda_generic,snd_sof_pci_intel_tgl,snd_sof_pci_intel_cnl
snd_ctl_led            24576  0
intel_ifs              40960  0
snd_soc_acpi_intel_sdca_quirks    12288  1 snd_soc_acpi_intel_match
i10nm_edac             20480  0
soundwire_generic_allocation    20480  1 soundwire_intel
skx_edac_common        28672  1 i10nm_edac
snd_soc_sdw_utils     139264  1 snd_sof_intel_hda_generic
nfit                   86016  1 skx_edac_common
snd_soc_acpi           16384  2 
snd_soc_acpi_intel_match,snd_sof_intel_hda_generic
x86_pkg_temp_thermal    16384  0
crc8                   12288  1 soundwire_cadence
intel_powerclamp       28672  0
snd_hda_codec_alc269   159744  1
soundwire_bus        1183744  4 
soundwire_intel,snd_soc_sdw_utils,soundwire_generic_allocation,soundwire_cadence
coretemp               24576  0
snd_hda_codec_realtek_lib    69632  1 snd_hda_codec_alc269
snd_soc_sdca          126976  2 snd_soc_acpi_intel_sdca_quirks,soundwire_bus
snd_hda_scodec_component    20480  1 snd_hda_codec_alc269
snd_hda_codec_nvhdmi    16384  1
snd_hda_codec_generic   131072  2 snd_hda_codec_realtek_lib,snd_hda_codec_alc269
snd_soc_avs           245760  0
snd_hda_codec_hdmi     61440  1 snd_hda_codec_nvhdmi
kvm_intel             442368  0
snd_soc_hda_codec      24576  1 snd_soc_avs
snd_hda_intel          65536  0
snd_hda_ext_core       36864  7 
snd_sof_intel_hda_sdw_bpt,snd_soc_avs,snd_soc_hda_codec,snd_sof_intel_hda_common,snd_soc_hdac_hda,snd_sof_intel_hda_mlink,snd_sof_intel_hda
snd_hda_codec         229376  10 
snd_hda_codec_generic,snd_soc_avs,snd_hda_codec_hdmi,snd_soc_hda_codec,snd_hda_intel,snd_hda_codec_nvhdmi,snd_hda_codec_realtek_lib,snd_soc_hdac_hda,snd_hda_codec_alc269,snd_sof_intel_hda
snd_soc_core          458752  8 
snd_soc_avs,snd_soc_hda_codec,soundwire_intel,snd_sof,snd_soc_sdca,snd_sof_intel_hda_common,snd_soc_sdw_utils,snd_soc_hdac_hda
kvm                  1531904  1 kvm_intel
snd_hda_core          159744  12 
snd_hda_codec_generic,snd_soc_avs,snd_hda_codec_hdmi,snd_soc_hda_codec,snd_hda_intel,snd_hda_ext_core,snd_hda_codec,snd_sof_intel_hda_common,snd_hda_codec_realtek_lib,snd_soc_hdac_hda,snd_hda_codec_alc269,snd_sof_intel_hda
snd_intel_dspcfg       49152  5 
snd_soc_avs,snd_hda_intel,snd_sof,snd_sof_intel_hda_common,snd_sof_intel_hda_generic
snd_compress           32768  2 snd_soc_avs,snd_soc_core
snd_intel_sdw_acpi     16384  2 snd_intel_dspcfg,snd_sof_intel_hda_generic
snd_pcm_dmaengine      20480  1 snd_soc_core
snd_hwdep              24576  1 snd_hda_codec
cxl_pci                28672  0
snd_pcm               217088  14 
snd_soc_avs,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec,soundwire_intel,snd_sof,snd_soc_sdca,snd_sof_intel_hda_common,snd_compress,snd_sof_intel_hda_generic,snd_soc_core,snd_sof_utils,snd_hda_core,snd_pcm_dmaengine
cxl_mem                12288  1 cxl_pci
irqbypass              16384  1 kvm
dell_wmi               16384  0
dell_pc                12288  0
cxl_acpi               28672  0
dell_wmi_sysman        57344  0
rapl                   20480  0
snd_timer              53248  1 snd_pcm
dell_smbios            36864  2 dell_wmi,dell_pc
dell_wmi_ddv           28672  0
cxl_pmem               24576  1 cxl_acpi
pmt_telemetry          16384  0
intel_cstate           20480  0
dcdbas                 20480  1 dell_smbios
libnvdimm             262144  2 cxl_pmem,nfit
isst_if_mmio           12288  0
isst_if_mbox_pci       16384  0
battery                28672  1 dell_wmi_ddv
intel_uncore          290816  0
firmware_attributes_class    12288  1 dell_wmi_sysman
sparse_keymap          12288  1 dell_wmi
dell_wmi_descriptor    20480  2 dell_wmi,dell_smbios
pmt_discovery          24576  1 pmt_telemetry
wmi_bmof               12288  0
snd                   159744  15 
snd_ctl_led,snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hwdep,snd_hda_intel,snd_hda_codec,snd_sof,snd_soc_sdca,snd_timer,snd_hda_codec_realtek_lib,snd_compress,snd_soc_sdw_utils,snd_hda_codec_alc269,snd_soc_core,snd_pcm
dax_hmem               20480  0
iaa_crypto             57344  0
dell_smm_hwmon         32768  0
pcspkr                 12288  0
mei_me                 57344  0
isst_if_common         28672  2 isst_if_mmio,isst_if_mbox_pci
pmt_class              20480  2 pmt_telemetry,pmt_discovery
intel_sdsi             20480  0
soundcore              16384  2 snd_ctl_led,snd
mei                   200704  1 mei_me
joydev                 32768  0
sg                     45056  0
evdev                  32768  13
binfmt_misc            28672  1
msr                    12288  0
i2c_dev                28672  0
configfs               65536  1
efi_pstore             12288  0
efivarfs               32768  1
autofs4                61440  2
ext4                 1257472  2
crc16                  12288  1 ext4
mbcache                20480  1 ext4
jbd2                  200704  1 ext4
crc32c_cryptoapi       12288  0
dm_crypt               69632  1
dm_mod                229376  10 dm_crypt
cdc_ncm                53248  0
cdc_ether              28672  1 cdc_ncm
usbnet                 65536  2 cdc_ncm,cdc_ether
r8152                 159744  0
mii                    16384  2 usbnet,r8152
hid_generic            12288  0
usbhid                 90112  0
hid                   282624  3 usbhid,snd_soc_sdca,hid_generic
nvme                   69632  3
nvme_core             249856  4 nvme
sr_mod                 28672  0
nvme_keyring           20480  1 nvme_core
cdrom                  86016  1 sr_mod
nvme_auth              32768  1 nvme_core
nouveau              3350528  8
mxm_wmi                12288  1 nouveau
drm_gpuvm              57344  1 nouveau
gpu_sched              69632  1 nouveau
drm_ttm_helper         20480  2 nouveau
ttm                   159744  2 drm_ttm_helper,nouveau
drm_exec               12288  2 drm_gpuvm,nouveau
i2c_algo_bit           16384  1 nouveau
drm_display_helper    311296  1 nouveau
cec                    81920  1 drm_display_helper
rc_core                81920  1 cec
drm_client_lib         16384  1 nouveau
drm_kms_helper        266240  4 
drm_display_helper,drm_ttm_helper,drm_client_lib,nouveau
ahci                   53248  0
libahci                61440  1 ahci
xhci_pci               24576  0
drm                   925696  17 
gpu_sched,drm_kms_helper,drm_exec,drm_gpuvm,drm_display_helper,drm_ttm_helper,drm_client_lib,ttm,nouveau
iTCO_wdt               16384  0
xhci_hcd              425984  1 xhci_pci
libata                495616  2 libahci,ahci
intel_pmc_bxt          16384  1 iTCO_wdt
idxd                  167936  1 iaa_crypto
aesni_intel           102400  1
rtsx_pci_sdmmc         40960  0
watchdog               53248  1 iTCO_wdt
video                  81920  2 dell_wmi,nouveau
atlantic              348160  0
usbcore               442368  7 
xhci_hcd,usbnet,usbhid,cdc_ncm,xhci_pci,cdc_ether,r8152
mmc_core              290816  1 rtsx_pci_sdmmc
scsi_mod              339968  3 libata,sg,sr_mod
gf128mul               12288  1 aesni_intel
intel_vsec             28672  1 pmt_telemetry
idxd_bus               16384  2 idxd,iaa_crypto
i2c_i801               32768  0
e1000e                389120  0
wmi                    36864  10 
dell_wmi_sysman,video,dell_wmi_ddv,dell_wmi,wmi_bmof,dell_smm_hwmon,dell_smbios,dell_wmi_descriptor,mxm_wmi,nouveau
pinctrl_alderlake      32768  0
macsec                 73728  1 atlantic
vmd                    28672  0
rtsx_pci              151552  1 rtsx_pci_sdmmc
button                 28672  1 nouveau
usb_common             20480  2 xhci_hcd,usbcore
scsi_common            16384  4 scsi_mod,libata,sg,sr_mod
i2c_smbus              20480  1 i2c_i801


-- System Information:
Debian Release: forky/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 
'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), 
(500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 7.1.3+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages cryptsetup-initramfs depends on:
ii  busybox                                 1:1.38.0-1
ii  cryptsetup                              2:2.8.6-2
ii  debconf [debconf-2.0]                   1.5.92
ii  initramfs-tools [linux-initramfs-tool]  0.151

Versions of packages cryptsetup-initramfs recommends:
ii  console-setup  1.248
ii  kbd            2.9.0-1

cryptsetup-initramfs suggests no packages.

-- debconf information:
  cryptsetup-initramfs/prerm_active_mappings: true

-- 
Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)

--- End Message ---
--- Begin Message ---
On Mon, 06 Jul 2026 at 17:34:57 +0200, Vincent Lefevre wrote:
> but in case the piped content is a text file (usually the case),
> i.e. with a newline character after the passphrase, then one gets
> an error, e.g.

It is the intended behavior, feel free to suggest a better wording for
README.Debian.gz but passphrase processing is already documented in
cryptsetup(8):

|  Passphrase processing for LUKS
|
|    From a terminal: The passphrase is read until the first newline and
|    then processed by PBKDF2 without the newline character.
|
|    From stdin: LUKS will read passphrases from stdin up to the first
|    newline character or the compiled-in maximum key file  length.  If
|    --keyfile-size is given, it is ignored.
|
|    From key file: The complete keyfile is read up to the compiled-in
|    maximum size. Newline characters do not terminate the input. The
|    --keyfile-size option can be used to limit what is read.

You need to either remove the trailing newline from the keyfile, or
force TTY-mode.

-- 
Guilhem.

--- End Message ---

Reply via email to