Kerberized NFS mounts not working on Raspberry PI

Bug #2009597 reported by Ubuntu-one-mw
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-raspi (Ubuntu)
Fix Released
Undecided
Unassigned
Jammy
Fix Released
Undecided
Unassigned
Kinetic
Fix Released
Undecided
Unassigned
Lunar
Fix Released
Undecided
Unassigned

Bug Description

[Impact]

Kerberized NFS mounts stopped working on Raspberry Pi starting with Ubuntu 21.10. In 22.10 the issue still exists.
The reason is that the kernel module rpcsec_gss_krb5 which is needed for establishing a kerberos protected NFS connection to the server has been removed from the kernel image and put to the linux-modules-extra package instead.
In my particular case it was:
linux-image-5.19.0-1011-raspi
Trying to mount the NFS share resulted in the following error message:

mount.nfs: an incorrect mount option was specified

I did not find any documentation stating that the linux-modules-extra package needs to be installed and the kernel module has to be loaded manually.

So my expectation would be either to update the documentation or to move rpcsec_gss_krb5 back to the kernel image.

[Fix]

Include modules in linux-modules.

[Where Problems Could Occur]

Just moving existing modules between packages.

description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Libera.chat.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/2009597/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

tags: added: bot-comment
affects: ubuntu → linux-raspi (Ubuntu)
Revision history for this message
Juerg Haefliger (juergh) wrote :

You don't have to manually load the module, just install linux-modules-extra. But we can move the module to the main modules package, no problem.

tags: added: kern-5996
Changed in linux-raspi (Ubuntu):
status: New → Confirmed
Juerg Haefliger (juergh)
description: updated
Changed in linux-raspi (Ubuntu Kinetic):
status: New → Confirmed
Changed in linux-raspi (Ubuntu Jammy):
status: New → Confirmed
Juerg Haefliger (juergh)
Changed in linux-raspi (Ubuntu Lunar):
status: Confirmed → Fix Committed
Changed in linux-raspi (Ubuntu Kinetic):
status: Confirmed → Fix Committed
Changed in linux-raspi (Ubuntu Jammy):
status: Confirmed → Fix Committed
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-raspi/5.19.0-1016.23 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-kinetic' to 'verification-done-kinetic'. If the problem still exists, change the tag 'verification-needed-kinetic' to 'verification-failed-kinetic'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-kinetic-linux-raspi verification-needed-kinetic
Revision history for this message
Ubuntu-one-mw (ubuntu-one-mw) wrote :

I tried to pull in the update from proposed as mentioned. But the latest version available is 5.19.0-1016.15. I cannot see 5.19.0-1016.23 in the package manager (proposed is enabled). Perhaps I'm doing something wrong?

Revision history for this message
Juerg Haefliger (juergh) wrote :

5.19.0.1016.15 is the version of the meta package linux-meta-raspi. `apt install linux-raspi` should pull in the latest from proposed (if proposed is enabled).

Revision history for this message
Juerg Haefliger (juergh) wrote :

$ rmadison linux-raspi linux-meta-raspi | grep kinetic
 linux-raspi | 5.19.0-1004.10 | kinetic | source
 linux-raspi | 5.19.0-1015.22 | kinetic-security | source
 linux-raspi | 5.19.0-1015.22 | kinetic-updates | source
 linux-raspi | 5.19.0-1016.23 | kinetic-proposed | source
 linux-raspi | 5.19.0.1004.6 | kinetic | arm64, armhf
 linux-raspi | 5.19.0.1015.14 | kinetic-security | arm64, armhf
 linux-raspi | 5.19.0.1015.14 | kinetic-updates | arm64, armhf
 linux-raspi | 5.19.0.1016.15 | kinetic-proposed | arm64, armhf
 linux-meta-raspi | 5.19.0.1004.6 | kinetic | source
 linux-meta-raspi | 5.19.0.1015.14 | kinetic-security | source
 linux-meta-raspi | 5.19.0.1015.14 | kinetic-updates | source
 linux-meta-raspi | 5.19.0.1016.15 | kinetic-proposed | source

Revision history for this message
Ubuntu-one-mw (ubuntu-one-mw) wrote :

I'm sorry. I was not able to check this. Probably the change is only available for the source package...

apt policy linux-raspi
linux-raspi:
  Installiert: 5.19.0.1015.14
  Installationskandidat: 5.19.0.1015.14
  Versionstabelle:
     5.19.0.1016.15 400
        400 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/main arm64 Packages
 *** 5.19.0.1015.14 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-updates/main arm64 Packages
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-security/main arm64 Packages
        100 /var/lib/dpkg/status
     5.19.0.1004.6 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic/main arm64 Packages

Revision history for this message
Juerg Haefliger (juergh) wrote :

ubuntu@rpi-4b-rev1d2-164b:~$ uname -r
5.19.0-1015-raspi
ubuntu@rpi-4b-rev1d2-164b:~$ apt-cache policy linux-raspi
linux-raspi:
  Installed: 5.19.0.1015.14
  Candidate: 5.19.0.1015.14
  Version table:
 *** 5.19.0.1015.14 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-updates/main arm64 Packages
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-security/main arm64 Packages
        100 /var/lib/dpkg/status
     5.19.0.1004.6 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic/main arm64 Packages
ubuntu@rpi-4b-rev1d2-164b:~$ sudo apt-add-repository -p proposed
Adding pocket proposed for all repositories.
Press [ENTER] to continue or Ctrl-c to cancel.
Adding: deb http://ports.ubuntu.com/ubuntu-ports kinetic-proposed universe main multiverse restricted
Hit:1 http://ports.ubuntu.com/ubuntu-ports kinetic InRelease
Hit:2 http://ports.ubuntu.com/ubuntu-ports kinetic-updates InRelease
Hit:3 http://ports.ubuntu.com/ubuntu-ports kinetic-backports InRelease
Hit:4 http://ports.ubuntu.com/ubuntu-ports kinetic-security InRelease
Get:5 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed InRelease [267 kB]
Get:6 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/universe arm64 Packages [34.1 kB]
Get:7 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/universe Translation-en [16.4 kB]
Get:8 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/universe arm64 c-n-f Metadata [1600 B]
Get:9 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/main arm64 Packages [77.0 kB]
Get:10 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/main Translation-en [24.3 kB]
Get:11 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/main arm64 c-n-f Metadata [2024 B]
Get:12 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/multiverse arm64 Packages [2812 B]
Get:13 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/multiverse Translation-en [1496 B]
Get:14 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/multiverse arm64 c-n-f Metadata [216 B]
Get:15 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/restricted arm64 Packages [74.8 kB]
Get:16 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/restricted Translation-en [17.8 kB]
Get:17 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/restricted arm64 c-n-f Metadata [376 B]
Fetched 519 kB in 3s (175 kB/s)
Reading package lists... Done
ubuntu@rpi-4b-rev1d2-164b:~$ apt-cache policy linux-raspi
linux-raspi:
  Installed: 5.19.0.1015.14
  Candidate: 5.19.0.1016.15
  Version table:
     5.19.0.1016.15 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/main arm64 Packages
 *** 5.19.0.1015.14 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-updates/main arm64 Packages
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-security/main arm64 Packages
        100 /var/lib/dpkg/status
     5.19.0.1004.6 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic/main arm64 Packages

Revision history for this message
Juerg Haefliger (juergh) wrote :

I suspect your problem is the proposed pin priority 400:
  400 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/main arm64 Packages

Do you have any files /etc/apt/preferences and/or /etc/apt/preferences.d/*?

Revision history for this message
Ubuntu-one-mw (ubuntu-one-mw) wrote :

Yes. I enabled selective installation from proposed according to the how-to mentioned in the bot message above.
Just deactivated it. Still looks the same (apart from the pin priority).

apt policy linux-raspi
linux-raspi:
  Installiert: 5.19.0.1015.14
  Installationskandidat: 5.19.0.1016.15
  Versionstabelle:
     5.19.0.1016.15 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-proposed/main arm64 Packages
 *** 5.19.0.1015.14 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-updates/main arm64 Packages
        500 http://ports.ubuntu.com/ubuntu-ports kinetic-security/main arm64 Packages
        100 /var/lib/dpkg/status
     5.19.0.1004.6 500
        500 http://ports.ubuntu.com/ubuntu-ports kinetic/main arm64 Packages

Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-raspi/5.15.0-1027.29 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-jammy' to 'verification-done-jammy'. If the problem still exists, change the tag 'verification-needed-jammy' to 'verification-failed-jammy'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-jammy-linux-raspi verification-needed-jammy
Revision history for this message
Juerg Haefliger (juergh) wrote :

It doesn't look quite the same, now you have:
   Installationskandidat: 5.19.0.1016.15

So it should upgrade now if you run
$ apt upgrade

Oh selective upgrade. I guess that means you have to explicitly install/upgrade the package in question:
$ apt install linux-raspi/kinetic-proposed

Revision history for this message
Juerg Haefliger (juergh) wrote :

Verified that the following modules are now provided by linux-modules-raspi:
  - net/sunrpc/auth_gss
  - net/sunrpc/auth_gss/rpcsec_gss_krb5.ko
  - net/sunrpc/auth_gss/auth_rpcgss.ko
  - net/sunrpc/sunrpc.ko

tags: added: verification-done-jammy verification-done-kinetic
removed: verification-needed-jammy verification-needed-kinetic
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (89.8 KiB)

This bug was fixed in the package linux-raspi - 6.2.0-1004.5

---------------
linux-raspi (6.2.0-1004.5) lunar; urgency=medium

  * lunar/linux-raspi: 6.2.0-1004.4 -proposed tracker (LP: #2013161)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Kerberized NFS mounts not working on Raspberry PI (LP: #2009597)
    - [Packaging] raspi: Include sunrpc and auth modules in linux-modules

  * Miscellaneous Ubuntu changes
    - [Packaging] raspi: Don't sign any staging modules
    - SAUCE: ARM: dts: Disable upstream Raspberry Pi DTBs
    - [Packaging] raspi: Ignore modules check

  * Miscellaneous upstream changes
    - drm/panel/panel-sitronix-st7701: Support SPI config and RGB data
    - overlays: Remove lirc-rpi from media-center
    - overlays: pca953x: Fix a typos in the pcal variants
    - iio: adc: mcp3422: Add correct compatible strings
    - ASoC: adau1977: Add correct compatible strings
    - overlays: Use vendor-qualified compatible strings
    - mfd: arizona-i2c: Declare of MODULE_DEVICE_TABLE
    - gpio: pca953x: Add ti,tca9554 compatible string
    - configs: Enable some modules required by overlays
    - hwmon: (aht10): Add DT compatible string
    - hwmon: (ds1621) Add DT compatible strings
    - rtc: ds3232: Add DT compatible string for ds3234
    - hwmon: (sht3x) Add DT compatible string
    - iio: light: tsl4531: Add DT compatible string
    - iio: light: veml6070: Add DT compatible string
    - Revert "media: i2c: imx290: Add support for H & V Flips"
    - Revert "media: i2c: imx290: Add support for 74.25MHz external clock"
    - Revert "media: i2c: imx290: Remove duplicated write to IMX290_CTRL_07"
    - Revert "media: i2c: imx290: Convert V4L2_CID_VBLANK to read/write"
    - Revert "media: i2c: imx290: Convert V4L2_CID_HBLANK to read/write"
    - Revert "media: i2c: imx290: Use CSI timings as per datasheet"
    - Revert "media: i2c: imx290: Support 60fps in 2 lane operation"
    - Revert "media: i2c: imx290: Fix the pixel rate at 148.5Mpix/s"
    - Revert "media: i2c: imx290: Add support for the mono sensor variant."
    - Revert "media: i2c: imx290: Add V4L2_SUBDEV_FL_HAS_EVENTS and subscribe
      hooks"
    - Revert "media: i2c: imx290: Set the colorspace fields in the format"
    - Revert "media: i2c: imx290: Match kernel coding style on whitespace"
    - Revert "media: dt-bindings: media: i2c: Add mono version to IMX290 bindings"
    - media: dt-bindings: media: i2c: Add mono version to IMX290 bindings
    - media: i2c: imx290: Add support for the mono sensor variant
    - media: i2c: imx290: Match kernel coding style on whitespace
    - media: i2c: imx290: Set the colorspace fields in the format
    - media: i2c: imx290: Add V4L2_SUBDEV_FL_HAS_EVENTS and subscribe hooks
    - media: i2c: imx290: Fix the pixel rate at 148.5Mpix/s
    - media: i2c: imx290: Support 60fps in 2 lane operation
    - media: i2c: imx290: Use CSI timings as per datasheet
    - media: i2c: imx290: Convert V4L2_CID_HBLANK to read/write
    - media: i2c: imx290: Convert V4L2_CID_VBLANK to read/write
    - media: i2c: imx290: VMAX is mode dependent
    - media: i2c: imx290: Remove duplic...

Changed in linux-raspi (Ubuntu Lunar):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (30.4 KiB)

This bug was fixed in the package linux-raspi - 5.15.0-1027.29

---------------
linux-raspi (5.15.0-1027.29) jammy; urgency=medium

  * jammy/linux-raspi: 5.15.0-1027.29 -proposed tracker (LP: #2011913)

  * Kerberized NFS mounts not working on Raspberry PI (LP: #2009597)
    - [Packaging] raspi: Include sunrpc and auth modules in linux-modules

  [ Ubuntu: 5.15.0-70.77 ]

  * jammy/linux: 5.15.0-70.77 -proposed tracker (LP: #2011918)
  * CVE-2023-26545
    - net: mpls: fix stale pointer if allocation fails during device rename
  * CVE-2023-1281
    - net/sched: tcindex: update imperfect hash filters respecting rcu
  * [SRU][Ubuntu 22.04.1] mpi3mr: Add management application interface(BSG)
    support (LP: #1971151)
    - scsi: mpi3mr: Add bsg device support
    - scsi: mpi3mr: Add support for driver commands
    - scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi
      header
    - scsi: mpi3mr: Add support for MPT commands
    - scsi: mpi3mr: Add support for PEL commands
    - scsi: mpi3mr: Expose adapter state to sysfs
    - scsi: mpi3mr: Add support for NVMe passthrough
    - scsi: mpi3mr: Update driver version to 8.0.0.69.0
    - scsi: mpi3mr: Increase I/O timeout value to 60s
    - scsi: mpi3mr: Hidden drives not removed during soft reset
    - scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR
    - scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init()
    - scsi: mpi3mr: Return error if dma_alloc_coherent() fails
    - scsi: mpi3mr: Add shost related sysfs attributes
    - scsi: mpi3mr: Add target device related sysfs attributes
    - scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings
    - scsi: mpi3mr: Fix kernel-doc
  * cpufreq: intel_pstate: Update Balance performance EPP for Sapphire Rapids
    (LP: #2008519)
    - cpufreq: intel_pstate: Update EPP for AlderLake mobile
    - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
  * Fail to output sound to external monitor which connects via docking station
    (LP: #2009024)
    - [Config] Enable CONFIG_SND_HDA_INTEL_HDMI_SILENT_STREAM
  * Fix mediatek wifi driver crash when loading wrong SAR table (LP: #2009118)
    - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read
  * Jammy update: v5.15.92 upstream stable release (LP: #2011472)
    - ARM: dts: imx: Fix pca9547 i2c-mux node name
    - ARM: dts: vf610: Fix pca9548 i2c-mux node names
    - arm64: dts: freescale: Fix pca954x i2c-mux node names
    - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
    - firmware: arm_scmi: Clear stale xfer->hdr.status
    - bpf: Skip task with pid=1 in send_signal_common()
    - erofs/zmap.c: Fix incorrect offset calculation
    - blk-cgroup: fix missing pd_online_fn() while activating policy
    - HID: playstation: sanity check DualSense calibration data.
    - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
    - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint()
    - extcon: usbc-tusb320: fix kernel-doc warning
    - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
    - tools: fix ARRAY_SIZE defines in tools and selftests hdrs
    - selftests/vm: ...

Changed in linux-raspi (Ubuntu Jammy):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (58.5 KiB)

This bug was fixed in the package linux-raspi - 5.19.0-1016.23

---------------
linux-raspi (5.19.0-1016.23) kinetic; urgency=medium

  * kinetic/linux-raspi: 5.19.0-1016.23 -proposed tracker (LP: #2011870)

  * Kerberized NFS mounts not working on Raspberry PI (LP: #2009597)
    - [Packaging] raspi: Include sunrpc and auth modules in linux-modules

  [ Ubuntu: 5.19.0-40.41 ]

  * kinetic/linux: 5.19.0-40.41 -proposed tracker (LP: #2012668)
  * CVE-2023-0468
    - io_uring: fix tw losing poll events
    - io_uring: make poll refs more robust
  * Regression in ext4 during online resize (LP: #2003816)
    - ext4: fix bad checksum after online resize
    - ext4: fix corruption when online resizing a 1K bigalloc fs
    - ext4: fix corrupt backup group descriptors after online resize

  [ Ubuntu: 5.19.0-39.40 ]

  * kinetic/linux: 5.19.0-39.40 -proposed tracker (LP: #2011876)
  * CVE-2023-26545
    - net: mpls: fix stale pointer if allocation fails during device rename
  * CVE-2023-1032
    - net: avoid double iput when sock_alloc_file fails
  * CVE-2022-41218 // CVE-2022-41218 is assigned to those bugs above.
    - media: dvb-core: Fix UAF due to refcount races at releasing
  * CVE-2023-1281
    - net/sched: tcindex: update imperfect hash filters respecting rcu
  * linux: CONFIG_SERIAL_8250_MID=y (LP: #2009283)
    - [Config] enable CONFIG_SERIAL_8250_MID=y
  * apply the latest TDX attestation driver from Intel (LP: #2009437)
    - Revert "UBUNTU: SAUCE: selftests: tdx: Test GetReport TDX attestation
      feature"
    - Revert "UBUNTU: SAUCE: x86/tdx: Add TDX Guest attestation interface driver"
    - x86/tdx: Add a wrapper to get TDREPORT0 from the TDX Module
    - virt: Add TDX guest driver
    - selftests/tdx: Test TDX attestation GetReport support
    - [Config] enable TDX attestation driver as module by default
  * cpufreq: intel_pstate: Update Balance performance EPP for Sapphire Rapids
    (LP: #2008519)
    - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
  * Fail to output sound to external monitor which connects via docking station
    (LP: #2009024)
    - [Config] Enable CONFIG_SND_HDA_INTEL_HDMI_SILENT_STREAM
  * Fix mediatek wifi driver crash when loading wrong SAR table (LP: #2009118)
    - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read
  * CVE-2022-47929
    - net: sched: disallow noqueue for qdisc classes
  * Intel graphic driver is not probing[8086:468b] (LP: #1990242)
    - drm/i915: Add new ADL-S pci id
  * Some QHD panels fail to refresh when PSR2 enabled (LP: #2009014)
    - drm/i915/psr: Use full update In case of area calculation fails
    - drm/i915: Ensure damage clip area is within pipe area
    - SAUCE: drm/i915/psr: Use calculated io and fast wake lines
  * overlayfs mounts as R/O over idmapped mount (LP: #2009065)
    - SAUCE: overlayfs: handle idmapped mounts in ovl_do_(set|remove)xattr
  * Kinetic update: upstream stable patchset 2023-02-28 (LP: #2008832)
    - usb: musb: remove extra check in musb_gadget_vbus_draw
    - arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins
    - arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable
    - arm64: dts: qcom: m...

Changed in linux-raspi (Ubuntu Kinetic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.