Bug#966716: initramfs-tools: update-initramfs fails with no conf.d/resume and veracrypt volume mounted
Package: initramfs-tools
Version: 0.133+deb10u1
Severity: important
Dear Maintainer,
update-initramfs failed during a system upgrade with the error:
>cryptsetup: WARNING: target "hdd500_crypt" not found in /etc/crypttab
where "hdd500_crypt" is my hdd, it contains /home and a small swap
partition(less than my ram).
The system is installed in a ssd "ssd_crypt".
In my experience this would make the system unbootable, it would loop on the
message "vg1 not found", "vg1" is a lvm volume group
whose physical volumes are just "hdd500_crypt". Fortunately I didn't reboot to
find out.
fstab and crypttab attached.
* What led up to the situation?
I deleted /etc/initramfs-tools/conf.d/resume and had a veracrypt(truecrypt
fork) volume mounted while calling update-initramfs -u -k all.
I did so because:
I don't use hibernation (my swap 4gb is smaller than my ram 16gb) and;
My ssd and hdd are encrypted with the same password, if I delete the resume
file I'm asked only once for the password at boot.
* What exactly did you do (or not do) that was effective (or
ineffective)?
I unmounted the truecrypt volume and/or re-created /etc/iniramfs-
tools/conf.d/resume (even with an invalid swap path it works).
* What was the outcome of this action?
I wouldn't expect update-initramfs -u -k all to fail just because there is no
resume partition set AND there is a veracrypt volume mounted.
A user could easily oversee this and accidentally make the system unbootable
during an upgrade just by having a veracrypt volume mounted.
* What outcome did you expect instead?
To always get an error(not an warning) when there is no resume device set or to
always get an error(not an warning) when there is a veracrypt volume mouted.
-- Package-specific info:
-- initramfs sizes
-rw-r--r-- 1 root root 39M Aug 2 09:06 /boot/initrd.img-4.19.0-10-amd64
-rw-r--r-- 1 root root 39M Aug 2 09:07 /boot/initrd.img-4.19.0-8-amd64
-rw-r--r-- 1 root root 39M Aug 2 09:07 /boot/initrd.img-4.19.0-9-amd64
-- /proc/cmdline
BOOT_IMAGE=/vmlinuz-4.19.0-9-amd64 root=/dev/mapper/vg0-root ro quiet
-- resume
RESUME=/dev/mapper/vg1-swap-- /proc/filesystems
ext3
ext2
ext4
vfat
xfs
fuseblk
jfs
msdos
minix
hfs
hfsplus
qnx4
ufs
btrfs
-- lsmod
Module Size Used by
btrfs 1400832 0
zstd_compress 172032 1 btrfs
zstd_decompress 81920 1 btrfs
xxhash 16384 2 zstd_compress,zstd_decompress
xor 24576 1 btrfs
raid6_pq 122880 1 btrfs
ufs 86016 0
qnx4 16384 0
hfsplus 118784 0
hfs 69632 0
minix 40960 0
msdos 20480 0
jfs 208896 0
uas 28672 0
usb_storage 73728 3 uas
ctr 16384 6
ccm 20480 9
nft_chain_route_ipv4 16384 1
xt_CHECKSUM 16384 1
nft_chain_nat_ipv4 16384 4
ipt_MASQUERADE 16384 3
nf_nat_ipv4 16384 2 ipt_MASQUERADE,nft_chain_nat_ipv4
tun 49152 1
bridge 188416 0
stp 16384 1 bridge
llc 16384 2 bridge,stp
devlink 77824 0
fuse 122880 7
vboxnetadp 28672 0
vboxnetflt 32768 0
vboxdrv 491520 2 vboxnetadp,vboxnetflt
binfmt_misc 20480 1
xfs 1458176 1
arc4 16384 2
snd_hda_codec_hdmi 57344 1
rtl8192cu 81920 0
rtl_usb 24576 1 rtl8192cu
rtl8192c_common 61440 1 rtl8192cu
nls_ascii 16384 1
nls_cp437 20480 1
rtlwifi 98304 3 rtl8192c_common,rtl_usb,rtl8192cu
vfat 20480 1
fat 86016 2 msdos,vfat
mac80211 835584 3 rtl_usb,rtl8192cu,rtlwifi
nf_log_ipv6 16384 0
cfg80211 774144 2 rtlwifi,mac80211
ip6t_REJECT 16384 0
nf_reject_ipv6 16384 1 ip6t_REJECT
xt_hl 16384 0
ip6_tables 32768 0
ip6t_rt 16384 0
eeepc_wmi 16384 0
asus_wmi 32768 1 eeepc_wmi
sparse_keymap 16384 1 asus_wmi
rfkill 28672 4 asus_wmi,cfg80211
video 45056 1 asus_wmi
wmi_bmof 16384 0
nvidia_drm 49152 5
drm_kms_helper 208896 1 nvidia_drm
serio_raw 16384 0
edac_mce_amd 28672 0
drm 495616 8 drm_kms_helper,nvidia_drm
nf_log_ipv4 16384 0
nf_log_common 16384 2 nf_log_ipv4,nf_log_ipv6
ipt_REJECT 16384 2
nf_reject_ipv4 16384 1 ipt_REJECT
snd_hda_codec_realtek 122880 1
kvm_amd 106496 0
snd_hda_codec_generic 86016 1 snd_hda_codec_realtek
xt_LOG 16384 0
kvm 757760 1 kvm_amd
snd_hda_intel 49152 9
nvidia_modeset 1114112 8 nvidia_drm
snd_hda_codec 151552 4
snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec_realtek
irqbypass 16384 1 kvm
efi_pstore 16384 0
snd_hda_core 94208 5
snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec,snd_hda_codec_realtek
efivars 20480 1 efi_pstore
snd_hwdep 16384 1 snd_hda_codec
pcspkr 16384 0
snd_pcm 114688 5
snd_hda_codec_hdmi,snd_hda_intel,snd_hda_codec,snd_hda_core
sp5100_tco 16384 0
snd_timer 36864 2 snd_pcm
sg 36864 0
snd 94208 24
snd_hda_codec_generic,snd_hda_codec_hdmi,snd_hwdep,snd_hda_intel,snd_hda_codec,snd_hda_codec_realtek,snd_timer,snd_pcm
pcc_cpufreq 16384 0
ccp 98304 1 kvm_amd
soundcore 16384 1 snd
rng_core 16384 1 ccp
evdev 28672 8
acpi_cpufreq 24576 0
nft_limit 16384 0
xt_limit 16384 0
xt_addrtype 16384 0
nvidia 20668416 294 nvidia_modeset
xt_tcpudp 16384 6
xt_conntrack 16384 1
nft_compat 20480 13
nft_counter 16384 16
nf_conntrack_netbios_ns 16384 0
nf_conntrack_broadcast 16384 1 nf_conntrack_netbios_ns
nf_nat_ftp 16384 0
nf_nat 36864 2 nf_nat_ftp,nf_nat_ipv4
nf_conntrack_ftp 20480 1 nf_nat_ftp
nf_conntrack 172032 8
xt_conntrack,nf_nat,nf_nat_ftp,ipt_MASQUERADE,nf_conntrack_netbios_ns,nf_nat_ipv4,nf_conntrack_broadcast,nf_conntrack_ftp
nf_defrag_ipv6 20480 1 nf_conntrack
nf_defrag_ipv4 16384 1 nf_conntrack
libcrc32c 16384 4 nf_conntrack,nf_nat,btrfs,xfs
nf_tables 143360 91
nft_chain_route_ipv4,nft_compat,nft_chain_nat_ipv4,nft_counter,nft_limit
ipmi_devintf 20480 0
ipmi_msghandler 65536 2 ipmi_devintf,nvidia
nfnetlink 16384 2 nft_compat,nf_tables
parport_pc 32768 0
ppdev 20480 0
lp 20480 0
parport 57344 3 parport_pc,lp,ppdev
efivarfs 16384 1
ip_tables 28672 0
x_tables 45056 14
xt_conntrack,nft_compat,xt_LOG,xt_tcpudp,ipt_MASQUERADE,xt_addrtype,xt_CHECKSUM,ip6t_rt,ip6_tables,ipt_REJECT,ip_tables,xt_limit,xt_hl,ip6t_REJECT
autofs4 49152 2
ext4 741376 3
crc16 16384 1 ext4
mbcache 16384 1 ext4
jbd2 122880 1 ext4
crc32c_generic 16384 0
fscrypto 32768 1 ext4
ecb 16384 0
algif_skcipher 16384 0
af_alg 28672 1 algif_skcipher
dm_crypt 40960 3
dm_mod 155648 16 dm_crypt
sr_mod 28672 0
cdrom 65536 1 sr_mod
hid_generic 16384 0
usbhid 57344 0
hid 135168 2 usbhid,hid_generic
sd_mod 61440 7
crct10dif_pclmul 16384 0
crc32_pclmul 16384 0
crc32c_intel 24576 6
ghash_clmulni_intel 16384 0
pcbc 16384 0
ahci 40960 4
libahci 40960 1 ahci
xhci_pci 16384 0
libata 270336 2 libahci,ahci
xhci_hcd 266240 1 xhci_pci
aesni_intel 200704 14
scsi_mod 249856 6 sd_mod,usb_storage,uas,libata,sg,sr_mod
r8169 90112 0
usbcore 294912 7
xhci_hcd,usbhid,rtl_usb,rtl8192cu,usb_storage,xhci_pci,uas
aes_x86_64 20480 1 aesni_intel
crypto_simd 16384 1 aesni_intel
cryptd 28672 6 crypto_simd,ghash_clmulni_intel,aesni_intel
realtek 20480 0
glue_helper 16384 1 aesni_intel
libphy 77824 3 r8169,realtek
i2c_piix4 24576 0
usb_common 16384 1 usbcore
wmi 28672 2 asus_wmi,wmi_bmof
gpio_amdpt 16384 0
gpio_generic 16384 1 gpio_amdpt
button 16384 0
-- /etc/initramfs-tools/modules
-- /etc/kernel-img.conf
# Kernel image management overrides
# See kernel-img.conf(5) for details
do_symlinks = yes
do_bootloader = no
do_initrd = yes
link_in_boot = no
-- /etc/initramfs-tools/initramfs.conf
MODULES=most
BUSYBOX=auto
KEYMAP=n
COMPRESS=gzip
DEVICE=
NFSROOT=auto
RUNSIZE=10%
-- /etc/initramfs-tools/update-initramfs.conf
update_initramfs=yes
backup_initramfs=no
-- /etc/crypttab
ssd_crypt UUID=434f8213-2edf-4c4c-86c9-ca245efa618e none luks
hdd500_crypt UUID=b700e76b-2edc-4837-b230-76c5c8656db1 none luks
-- mkinitramfs hooks
/etc/initramfs-tools/hooks/:
/usr/share/initramfs-tools/hooks:
cryptgnupg
cryptgnupg-sc
cryptkeyctl
cryptopensc
cryptpassdev
cryptroot
cryptroot-unlock
dmsetup
fsck
fuse
keymap
klibc-utils
kmod
lvm2
ntfs_3g
plymouth
resume
thermal
thin-provisioning-tools
udev
xfs
zz-busybox
zz_nvidia-blacklists-nouveau
-- System Information:
Debian Release: 10.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-9-amd64 (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=pt_BR.utf8, LC_CTYPE=pt_BR.utf8 (charmap=UTF-8),
LANGUAGE=pt_BR:pt:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages initramfs-tools depends on:
ii initramfs-tools-core 0.133+deb10u1
ii linux-base 4.6
initramfs-tools recommends no packages.
Versions of packages initramfs-tools suggests:
ii bash-completion 1:2.8-6
-- no debconf information
*** /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
/dev/mapper/vg0-root / ext4 errors=remount-ro 0 1
/dev/mapper/vg1-home /home xfs defaults 0 1
# /boot was on /dev/sdb2 during installation
UUID=2262b0ed-5a3c-4448-bd51-e478de351697 /boot ext2 defaults
0 2
# /boot/efi was on /dev/sdb1 during installation
UUID=AD67-42BD /boot/efi vfat umask=0077 0 1
/dev/mapper/vg1-swap none swap sw 0 0
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
*** /etc/crypttab
Reply to: