[Bug 468208] Re: cryptsetup passphrase prompt at boot not working if waiting too long (w/o usplash)
Diet Coker
imagenesis at gmail.com
Sun Dec 8 00:23:32 UTC 2013
This bug is still present. It is present not only on crypttab password
prompts but also on /ecryptfs password prompts.
Encryption on boot with password is utterly broken because of this, and
likely any other input at boot.
1. This issue still absolutely remains with the cryptsetup password prompts.
2. With ecryptfs, even though it appears that nothing has stolen the keyboard focus (ie data does not appear to be printed past the Password: semicolon) the string that is actually sent from the password prompt is incorrect. Pressing the enter key either does not do anything or it sends the enter key as a character in the password prompt.
3. This behavior also quite possibly messes up upstart event loop as evidenced by the following behavior:
If a mount of ecryptfs is after a mount of a swap from a cryptsetup
unencrypted /dev/mapper, it specifies that /dev/mapper disk does not
exist.
http://askubuntu.com/questions/387529/how-to-enable-crypttab-to-run-at-boot
http://askubuntu.com/questions/387463/how-to-decrypt-encryptfs-at-boot
As specified, when the ecryptfs mount entry in fstab is after the swap
mount, it specifies that the disk does not exist and completely skips
the ecryptfs mount without prompting for the password or recording said
failure in /var/log/boot.log.
This is a critical bug. How has this been festering for 4 years. Does no
one mount decrypt at boot?
Utter failure canonical.
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cryptsetup in Ubuntu.
https://bugs.launchpad.net/bugs/468208
Title:
cryptsetup passphrase prompt at boot not working if waiting too long
(w/o usplash)
Status in “cryptsetup” package in Ubuntu:
Triaged
Bug description:
Binary package hint: cryptsetup
I have a LUKS-encrypted /home device (which in turn is a LVM
partition). This setup worked very well until updating to 9.10.
When booting, I am prompted for the passphrase (I always boot with the
"nosplash" option). This passphrase prompt is soon spoiled by messages
"waiting for <some mountpoint>", so the boot seems to continue.
If ignoring these messages and just entering the passphrase (hitting
the enter key in the end) works, if I am fast enough(!).
However, waiting for some seconds (maybe 20), it is *not* possible to
correctly enter the passphrase any more: hitting the enter key after
entering the passphrase does not start a new line or trigger any other
notable action from cryptsetup (i.e., I don't get any "command failed"
or "key slot xxx unlocked" messages). Hitting the enter key some times
more does the job but the passphrase is rejected and asked for again
up to three times. However, these new prompts always show the same
behavior: hitting the enter key once does not start a new line or
trigger the cryptsetup to continue as it should. Only hitting it some
more times does but the passpharse is always rejected, even if entered
correctly.
It seems that something in the subsequent boot chain partly steals
keyboard focus.
Update 1 [see my comment 2 below]: This also affects recovery mode.
Update 2: It is also worth to note that after enetring the wrong
password three times, I have no possibility whatsoever to logon, even
though this should be possible as only the /home partition is
encrypted. I have to reboot and try again until I succeed. *Very*
annoying.
Update 3: It seems that specifying the "noearly" option in
/etc/crypttab is a workaround for me (not systematically tested
though).
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/468208/+subscriptions
More information about the foundations-bugs
mailing list