From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-we0-x22b.google.com (mail-we0-x22b.google.com [IPv6:2a00:1450:400c:c03::22b]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mail.server123.net (Postfix) with ESMTPS for ; Sun, 3 Aug 2014 21:41:48 +0200 (CEST) Received: by mail-we0-f171.google.com with SMTP id p10so6784661wes.16 for ; Sun, 03 Aug 2014 12:41:48 -0700 (PDT) Received: from [192.168.2.28] (56.157.broadband5.iol.cz. [88.100.157.56]) by mx.google.com with ESMTPSA id da9sm32894571wib.5.2014.08.03.12.41.47 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 03 Aug 2014 12:41:47 -0700 (PDT) Message-ID: <53DE907A.1020805@gmail.com> Date: Sun, 03 Aug 2014 21:41:46 +0200 From: Milan Broz MIME-Version: 1.0 References: <20140801035717.GA28952@tansi.org> <53DB31A5.6010508@gmail.com> <20140803000116.GA17450@tansi.org> In-Reply-To: <20140803000116.GA17450@tansi.org> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Subject: Re: [dm-crypt] Kernel update: "Failed to access temporary keystore device." List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de On 08/03/2014 02:01 AM, Arno Wagner wrote: >> Can you paste the command with added --debug? > > See below, both for 1.6.1 and 1.6.5, which unloaks without > error (well, without error that gets propagated to the user), > but never creates the entry in /dev/mapper/. Likely > a bug in 1.6.5, as it probably should tell the user that > things went wrong. The 1.6.5 uses different code here (it reads device directly when decrypting keyslot) and it need more user friendly error messages here, my bad... Anyway, seems like in both cases read of device really returns I/O error while reading keyslot area. Could you send me strace of the command? (No need to enter correct password at all.) BTW if not already there, it is another nice item to FAQ - warn people that strace and similar debugging output can easily leak keys or passwords. And yes, people sometimes post these to lists :) > >> Can you try to boot Debian provided kernel - does it work? > > Not easily. But it does work with 3.10.51, so the 3.2.x that > Debian stable is stuck at should probably work too. > > Come to think of it, I have /usr/src/linux pointing to a 3.4.67 > source tree, as gcc kernel includes in Debian stable are really > messed up with 3.5.x and later and I failed to fix it manually. > (Sometimes I really wonder what the Kernel devs are thinking or > whether they are thinking at all...) Could that be the problem? Don't think so... kernel should use own includes while compiling and what's failing here is just plain read (I think). > I usually run testing, except that I really do not want systemd, > so until I am sure I can do that update without getting that > atrocity, no update to jessy for me. There is a lot of discussion about this on debian devel, IIRC systemd-shim is possible the way to avoid systemd as init. (dunno if this will be supported). > Anyways, if we do not figure this one out, I will just stay > with 3.10.x, it is a longterm-kernel after all. I just > tried 3.14.15 because I have some network issues and wanted to > see whether they may be gone with a newer kernel. Well, it would be interesting to find what's wrong here. You are using MD device - what kind of raid is that? (lsblk -t can say more info about storage stack topology as well). Milan