You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In Debian 12 non root devices are not unlocked with just /etc/crypttab entries (with _netdev). With only crypttab the system silently fails to unlock and does not wait for the password. Adding the mapped devices in /etc/fstab with the _netdev option successfuly gives the password prompt and unlocks with Tang. The behavior was different in Debian 11 where crypttab entry alone will unlock the device
The text was updated successfully, but these errors were encountered:
Debian maintainer here, also promising to look into this mailbox more often. @bigops Sorry to hear about these issues. Although you've found a solution, I'd still like to investigate, so can you describe your setup a bit more in detail?
If I understand correctly you have two encrypted block devices. One holds the root filesystem and is unlocked as expected. The second is something different that however should be unlocked during boot. Important question: Should that unlocking happen in the initrd stage, or later, as part of the regular crypttab handling?
In the first case, adding ",initramfs" to the crypttab should help, see also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000648#20 and /usr/share/doc/clevis-initramfs/README.Debian
sarroutbi
changed the title
Debain 12 Non root device Unlocking issues with Tang
Debian 12 Non root device Unlocking issues with Tang
Sep 23, 2024
In Debian 12 non root devices are not unlocked with just /etc/crypttab entries (with _netdev). With only crypttab the system silently fails to unlock and does not wait for the password. Adding the mapped devices in /etc/fstab with the _netdev option successfuly gives the password prompt and unlocks with Tang. The behavior was different in Debian 11 where crypttab entry alone will unlock the device
The text was updated successfully, but these errors were encountered: