cryptsetup luks commands randomly fail

[David MacKinnon]

Binary package hint: cryptsetup

This is on gutsy 2:1.0.4+svn29-1ubuntu4

luksAdd/luksDel can randomly fail with errors such as

"Failed to setup dm-crypt key mapping
Check kernel for support for the aes-cbc-essiv:sha256 cipher spec and verify that /dev/sda5 contains at least 261 sectors.
Failed to read from key storage
No key available with this passphrase.
Command failed."

See http://article.gmane.org/gmane.linux.kernel.device-mapper.dm-crypt/2236 for discussion about this bug, and a patch that appears to fix it. The patch is against 1.0.5 but cleanly applies to the source in the repository.

[David MacKinnon (blaedd)]

Patch that appears to fix this by calling UDEVSETTLE

[Reinhard Tartler (siretart)]

so we seem to have indeed another udev race here. The patch from suse looks quite hackish to me (calling udevsettle() with system() to calm things down), which is a workaround in cryptsetup but not a real fix.

udev maintainers, what do you think about this bug? can this be fixed in udev, or shall we take suse's patch?

[David MacKinnon (blaedd)]

Just pinging on this, it's a fairly serious bug for anyone trying to do anything automated with cryptsetup.

-David

[Scott James Remnant (Canonical) (canonical-scott)]

What causes the race, do we know?

[David MacKinnon (blaedd)]

So are we pushing a gutsy release next without this patched anywhere?

[Scott Beamer (angrykeyboarder)]

That is correct.

[Reinhard Tartler (siretart)]

as per discussion with Keybuk, we will apply that patch to cryptsetup. Working on it soon.

[Reinhard Tartler (siretart)]

as per discussion with Keybuk, this is a candidate for an SRU.

[Reinhard Tartler (siretart)]

proposed fix

[Martin Pitt (pitti)]

Patch looks good for gutsy, please upload. How will we fix this in Hardy, with the same workaround, or with an udev fix? Please update the task states appropriately. Thank you, Reinhard!

[Reinhard Tartler (siretart)]

cryptsetup (2:1.0.5-2ubuntu3) hardy; urgency=low

  * RELIABILY FIX: lib/libdevmapper.c: Ensure that pending device creation
    events are being processed by calling /sbin/udevsettle. Patch based on
    OpenSUSE bug #285478, LP: #132373.
  * Based on the change above, the patch from LP #85640 is no longer needed.
    dropping the relevant parts.
  * Fix debian/rules to not fail to build if autom4te.cache is left behind
    from a previous incomplete build.

 -- Reinhard Tartler <email address hidden> Fri, 02 Nov 2007 20:53:31 +0100

[Reinhard Tartler (siretart)]

fix is to call udevsettle from /sbin/cryptsetup. udev rules cannot help here much with syncronisation

[Reinhard Tartler (siretart)]

see above

[Reinhard Tartler (siretart)]

fix uploaded (as dpatch, to match the packaging). Waiting for approval by archive admins

[Martin Pitt (pitti)]

Accepted into gutsy-proposed, please test.

[Andres Freund (andres-anarazel)]

With the fix my root partition doesnt get recognized anymore. It waits for the root device indefinitely.
This notification of waiting appears before the sata devices are initialized - all the relevant stuff is printed after the "waiting for ...".
Readding udevsettle to scripts/local-top/cryptroot makes everything work as before.
Anything I should test?

[Reinhard Tartler (siretart)]

looks like I was overagressive with removing the udevsettle calls. Will readd them to the hardy package.

They have not been removed from the package I uploaded to gutsy-proposed!

[tonyric (tony-ournuthut)]

Thank you.

On 11/8/07, Reinhard Tartler <email address hidden> wrote:
>
> looks like I was overagressive with removing the udevsettle calls. Will
> readd them to the hardy package.
>
> They have not been removed from the package I uploaded to gutsy-
> proposed!
>
> ** Changed in: cryptsetup (Ubuntu)
> Status: Fix Released => In Progress
>
> --
> cryptsetup luks commands randomly fail
> https://bugs.launchpad.net/bugs/132373
> You received this bug notification because you are a direct subscriber
> of a duplicate bug.
>

[Reinhard Tartler (siretart)]

cryptsetup (2:1.0.5-2ubuntu5) hardy; urgency=low

  * reenable additional udevsettle calls in cryptroot hook from
    https://launchpad.net/bugs/85640, LP: #132373.
  * change maintainer to ubuntu-core-dev.
  * use Vcs-Bzr instead of XSCB-Vcs-Bzr header in debian/control.

 -- Reinhard Tartler <email address hidden> Thu, 08 Nov 2007 23:52:19 +0100

[Serge (serge-de-souza)]

Tested several times, no issues

Looks good to me

[Master One (masterone)]

I am sorry, but is this the issue I am experiencing here: http://ubuntuforums.org/showthread.php?t=615001 ?

[Serge (serge-de-souza)]

On 17/11/2007, Master One <email address hidden> wrote:
> I am sorry, but is this the issue I am experiencing here:
> http://ubuntuforums.org/showthread.php?t=615001 ?

Possibly, try installing
http://archive.ubuntu.com/ubuntu/pool/main/c/cryptsetup/cryptsetup_1.0.5-2ubuntu5_i386.deb
and see if that fixes it.

Serge

[Master One (masterone)]

Yes, that new version of cryptsetup fixed the issue. Thanks a lot. :)

[Brian Murray (brian-murray)]

I test cryptsetup version 1.0.5-2ubuntu2 on gutsy and did experience some errors just adding and removing keys to a luks formatted partition. After installing 1.0.5-2ubuntu2.1 from gutsy-proposed I no longer experienced those errors.

[Martin Pitt (pitti)]

Copied to gutsy-updates.