Re: auto unlock encrypted disks using clevis/tang works for ext4 but not btrfs?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




> On 11 Jun 2022, at 18:36, Barry <barry@xxxxxxxxxxxxxxxx> wrote:
> 
> 
> 
>> On 10 Jun 2022, at 23:09, Gordon Messmer <gordon.messmer@xxxxxxxxx> wrote:
>> 
>> On 6/10/22 11:29, Barry Scott wrote:
>>> What logs do I need to collect?
>> 
>> 
>> I'd start by looking at "journalctl -b0"
>> 
>> You might be able to find clevis information in there.
> 
> Already did that and there is nothing that stands out.

I have been slowly reproducing the issue and checking logs.
I found an error from clevis - no network!

The initramfs does not contain any code to bring up the network.

On the system that works I use systemd-networkd and that is in
the initramfs.

But on the system that does not work its was using NetworkManager
and the initramfs has not network modules init.

I changed the system to use systemd-networkd and stopped using NetworkManager.
But dracut does not add systemd-networkd to the initramfs.

I spent some time trying to figure out why by adding echo statements to the dracut
code, but I'm no closer to understanding why systemd-networkd is not added.

What I did do is:

	$ dracut -f --add systemd-networkd

and that makes clevis unlocking work.

I'll add a dracut conf file to force this on.

I think this is worth raising as a bugzilla and will do that.

Barry




> 
>> 
>> Another interesting item might be to run "ls -l /boot/initramfs-$(uname -r).img > initramfs-$(hostname)" and to diff the two resulting files.
> 
> Will do might give a clue. But I see both systems cause the tang server to log key lookups, so I think the init is setup.

> 
> I am planning the read the source of the Clovis pieces to see what they will log.
> 
> 
> Barry
> 
> 
>> _______________________________________________
>> users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
>> To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
>> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
>> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
> _______________________________________________
> users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux