Re: remote unlocking via ssh: interactive vs passphrase piping
On 2026-07-06 16:11:11 +0200, Vincent Lefevre wrote:
> But if I do
>
> cat file | ssh -T ...
>
> where "file" is a text file just containing the passphrase,
> I get an error:
>
> X11 forwarding request failed on channel 0
> Please unlock disk nvme0n1p3_crypt
> cryptsetup: cryptsetup failed, bad password or options?
>
> What could be the cause?
I've eventually found the issue. This is due to the newline character
after the passphrase, which cryptroot-unlock doesn't remove! I could
confirm with "echo -n <passphrase> | ssh ...", which works.
I've reported the bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1141580
(I thought I had tried with "printf %s <passphrase>" earlier,
but I may have made a mistake in my test.)
--
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)
Reply to: