[lkml]   [2009]   [Aug]   [30]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [pkg-cryptsetup-devel] Bug#541835: crypto configuration / dependencies broken
    On Sun, 30 Aug 2009 17:37:22 +0200
    Sebastian Andrzej Siewior <> wrote:

    > * Sebastian Andrzej Siewior | 2009-08-28 10:00:56 [+0200]:
    > >>> the problem is not reproducible with a debian/unstable kernel,
    > >>> even though it has cbc compiled as module as well. but if I recompile
    > >>> the same kernel sources with Celejars kernel .config, the problem
    > >>> occurs. thus it must be related to the kernel config in some way.
    > >It must be the kernel confing since I run .30.stable and it works. I try
    > >to look at it later.
    > Your kernel config is fine, the problem is that the initramfs tools do
    > not copy all of the required modules into the initramfs. The missing
    > modles are:
    > - cryptomgr: that one is responsible to load the cbc and aes module and
    > bind them to cbc(aes)
    > - chainiv: that one creates IVs if the "user" does not specify one.
    > dm-crypt probably does not use that one but is required due to the way
    > crypto works atm.
    > - krng: provides random numbers and is required by chainiv.
    > If you add those three to /etc/initramfs/modules than it should work.

    Right your are! It now works, thanks very much. I guess the catch was
    that the working (stock Debian) kernel config built cryptomgr
    (CRYPTO_MANAGER and CRYPTO_MANAGER2) and krng (CRYPTO_RNG2, although
    not CRYPTO_RNG) and chainiv (CRYPTO_BLKCIPHER2, although not
    CRYPTO_BLKCIPHER - I have the impression that chainiv is now
    controlled by the BLKCIPHER options?) into the kernel, not as modules,
    so I wasn't hit by the initramfs failure until I built them as modules
    (I have a bit of a fetish for building everything as a module,
    especially when using initrd's :/).

    > Could someone please look at initramfs to figure out why those three
    > modules are not copied in this reduced setup?

    -- - remote access via secure (OpenPGP) email - A Simple Sudoku Solver and Generator

     \ /
      Last update: 2009-08-31 02:17    [W:0.023 / U:0.132 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site