Optimistic approach of using zkey for encrypted installations on s390x not working
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu on IBM z Systems |
Fix Released
|
High
|
Canonical Foundations Team | ||
curtin |
Fix Released
|
Undecided
|
Unassigned | ||
subiquity |
Invalid
|
Undecided
|
Unassigned |
Bug Description
I recently wanted to do an s390x installation with LUKS encryption - and have everything in place for the 'optimistic usage of zkey'.
Trying this - on z/VM as well as on LPAR - failed.
After the post-install reboot the system ended up in busybox.
During the installation everything seemed to work fine.
Further tests showed that DASD installations (with LUKS encryption) work:
$ sudo cryptsetup status $(awk '{ print $1 }' /etc/crypttab )
/dev/mapper/
type: LUKS2
cipher: paes-xts-plain64
keysize: 1024 bits
key location: keyring
device: /dev/dasda2
sector size: 4096
offset: 32768 sectors
size: 12290272 sectors
mode: read/write
Just zFCP installation fail - hence I'm assuming that this is due to multipath issues.
And installation with the 20.04 legacy image on an encrypted zFCP disk also worked fine with zkey:
$ sudo cryptsetup status $(awk '{ print $1 }' /etc/crypttab )
/dev/mapper/
type: LUKS2
cipher: aes-xts-plain64
keysize: 512 bits
key location: keyring
device: /dev/mapper/
sector size: 512
offset: 32768 sectors
size: 131633152 sectors
mode: read/write
flags: discards
I already did encrypted installations on zFCP with subiquity in the past.
Please see attached the console log of the post install reboot (two different system - z/VM and LPAR - but same result).
Related branches
- Server Team CI bot: Approve (continuous-integration)
- Dan Bungert: Approve
-
Diff: 115 lines (+39/-10)3 files modifiedcurtin/block/lvm.py (+9/-6)
curtin/commands/curthooks.py (+23/-1)
tests/unittests/test_block_lvm.py (+7/-3)
- Michael Hudson-Doyle: Approve
- Server Team CI bot: Approve (continuous-integration)
-
Diff: 13 lines (+2/-1)1 file modifiedcurtin/block/__init__.py (+2/-1)
- Server Team CI bot: Approve (continuous-integration)
- Michael Hudson-Doyle: Pending requested
-
Diff: 73 lines (+16/-9)2 files modifiedcurtin/block/lvm.py (+9/-6)
tests/unittests/test_block_lvm.py (+7/-3)
- Dan Bungert: Approve
- Server Team CI bot: Approve (continuous-integration)
-
Diff: 42 lines (+1/-23)1 file modifiedcurtin/commands/curthooks.py (+1/-23)
Changed in ubuntu-z-systems: | |
importance: | Undecided → High |
tags: | added: fr-701 |
Changed in ubuntu-z-systems: | |
status: | New → In Progress |
Changed in subiquity: | |
status: | New → Invalid |
Changed in ubuntu-z-systems: | |
status: | In Progress → Fix Committed |
same with latest 20.10 image (RC from Oct 20th)
works with DASD, but not with zFCP