dracut needs to see crypto_LUKS devices in order to consider including systemd-cryptsetup in the initrd

[Dan Bungert]

With debian/patches/ubuntu/4001-dracut-Open-and-mount-luks-keystore.patch applied, systemd-cryptsetup is a requirement.

Proceeding without goes poorly.

[John Cabaj (john-cabaj)]

2.4.0-1ubuntu2 -> 2.4.0-1ubuntu3 debdiff

[John Cabaj (john-cabaj)]

2.4.0-1ubuntu3 on its way to -proposed with proper dependencies added.

[Dan Bungert (dbungert)]

So declaring the dependency from zfs-dracut to systemd-cryptsetup seems like a good idea, but is insufficient. The decision to include systemd-cryptsetup in the initrd has regressed somehow between questing and now, any ideas?

[Dan Bungert (dbungert)]

Thanks John!

[Benjamin Drung (bdrung)]

Looking at dracut itself: dracut-core suggests systemd-cryptsetup in questing (108-3ubuntu3) and that is the same for resolute (109-11ubuntu1). So it wasn't dracut that pulled in systemd-cryptsetup.

[Benjamin Drung (bdrung)]

In questing you can see crypt and systemd-cryptsetup. In resolute none of them. I suspect this check() code to be relevant:

```
    [[ $hostonly ]] || [[ $mount_needs ]] && {
        for fs in "${host_fs_types[@]}"; do
            [[ $fs == "crypto_LUKS" ]] && return 0
        done
        return 255
    }
```

The only relevant change between 108 and 109 is: https://github.com/dracut-ng/dracut-ng/pull/1673

[Launchpad Janitor (janitor)]

This bug was fixed in the package zfs-linux - 2.4.0-1ubuntu3

---------------
zfs-linux (2.4.0-1ubuntu3) resolute; urgency=medium

  * zfs-dracut depends on systemd-cryptsetup (LP: #2140415)
    - adding systemd-cryptsetup as zfs-dracut dependency

 -- John Cabaj <email address hidden> Wed, 04 Feb 2026 14:13:18 -0600