[ubuntu/bionic-proposed] cryptsetup 2:2.0.2-1ubuntu1.2 (Accepted)

Guilherme G. Piccoli gpiccoli at canonical.com
Thu Oct 8 23:45:49 UTC 2020


cryptsetup (2:2.0.2-1ubuntu1.2) bionic; urgency=medium

  * Introduce retry logic for external invocations after mdadm (LP: #1879980)
    - Currently, if an encrypted rootfs is configured on top of a MD RAID1
      array and such array gets degraded (e.g., a member is removed/failed)
      the cryptsetup scripts cannot mount the rootfs, and the boot fails.
      We fix that issue here by allowing the cryptroot script to be re-run
      by initramfs-tools/local-block stage, as mdadm can activate degraded
      arrays at that stage.
      There is an initramfs-tools counter-part for this fix, but alone the
      cryptsetup portion is harmless.
    - d/i/cryptroot-script: set files used by cryptsetup/initramfs-tools
      (flag that local-block is running and external invocation counter);
      change logic from just wait 180 seconds / activating LVM every 10
      seconds to waiting 5 seconds first, then allowing initramfs-tools
      to run mdadm (to activate degraded arrays) and call back at least
      30 times/seconds more / activating LVM every 1 second.
    - d/i/cryptroot-script-block: set flag that local-block is running.
    - d/i/cryptroot-script-bottom: clean up the flag and counter files.
    - d/rules: ship the new local-bottom script.

Date: Mon, 03 Aug 2020 18:28:48 -0300
Changed-By: gpiccoli at canonical.com (Guilherme G. Piccoli)
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Mauricio Faria de Oliveira <mfo at canonical.com>
https://launchpad.net/ubuntu/+source/cryptsetup/2:2.0.2-1ubuntu1.2
-------------- next part --------------
Format: 1.8
Date: Mon, 03 Aug 2020 18:28:48 -0300
Source: cryptsetup
Binary: cryptsetup cryptsetup-bin libcryptsetup12 libcryptsetup-dev cryptsetup-udeb libcryptsetup12-udeb
Architecture: source
Version: 2:2.0.2-1ubuntu1.2
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Guilherme G. Piccoli <gpiccoli at canonical.com>
Description:
 cryptsetup - disk encryption support - startup scripts
 cryptsetup-bin - disk encryption support - command line tools
 cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb)
 libcryptsetup-dev - disk encryption support - development files
 libcryptsetup12 - disk encryption support - shared library
 libcryptsetup12-udeb - disk encryption support - shared library (udeb) (udeb)
Launchpad-Bugs-Fixed: 1879980
Changes:
 cryptsetup (2:2.0.2-1ubuntu1.2) bionic; urgency=medium
 .
   * Introduce retry logic for external invocations after mdadm (LP: #1879980)
     - Currently, if an encrypted rootfs is configured on top of a MD RAID1
       array and such array gets degraded (e.g., a member is removed/failed)
       the cryptsetup scripts cannot mount the rootfs, and the boot fails.
       We fix that issue here by allowing the cryptroot script to be re-run
       by initramfs-tools/local-block stage, as mdadm can activate degraded
       arrays at that stage.
       There is an initramfs-tools counter-part for this fix, but alone the
       cryptsetup portion is harmless.
     - d/i/cryptroot-script: set files used by cryptsetup/initramfs-tools
       (flag that local-block is running and external invocation counter);
       change logic from just wait 180 seconds / activating LVM every 10
       seconds to waiting 5 seconds first, then allowing initramfs-tools
       to run mdadm (to activate degraded arrays) and call back at least
       30 times/seconds more / activating LVM every 1 second.
     - d/i/cryptroot-script-block: set flag that local-block is running.
     - d/i/cryptroot-script-bottom: clean up the flag and counter files.
     - d/rules: ship the new local-bottom script.
Checksums-Sha1:
 408d650106c77509fab20f3c361a926dd328a30e 2889 cryptsetup_2.0.2-1ubuntu1.2.dsc
 a0e50f7818bf39976da9661251bebe67a500d162 106000 cryptsetup_2.0.2-1ubuntu1.2.debian.tar.xz
 e27a92f501e7c1cfb1962aca220459f76f34278e 7438 cryptsetup_2.0.2-1ubuntu1.2_source.buildinfo
Checksums-Sha256:
 c8c318890462a4340162a8867a7ce06f40bffd58e6aa2bee0fb1eb67245b4a86 2889 cryptsetup_2.0.2-1ubuntu1.2.dsc
 64b1845344addc6dbc1f99bd28546460caaa612925e4307ab892cee2722047a9 106000 cryptsetup_2.0.2-1ubuntu1.2.debian.tar.xz
 4ad7b829278c9f89fc7c922d65d395582092099b0f8c033cd97c7476c703e7b4 7438 cryptsetup_2.0.2-1ubuntu1.2_source.buildinfo
Files:
 c00833251ffb04e5807abe12315879ac 2889 admin optional cryptsetup_2.0.2-1ubuntu1.2.dsc
 552d20a1605027fd9e442e9ed0558038 106000 admin optional cryptsetup_2.0.2-1ubuntu1.2.debian.tar.xz
 d0bd88dfbb6a3ded286c4fbb87979c9c 7438 admin optional cryptsetup_2.0.2-1ubuntu1.2_source.buildinfo
Original-Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-devel at lists.alioth.debian.org>


More information about the Bionic-changes mailing list