From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id C6149138334 for ; Sun, 18 Nov 2018 05:28:45 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 790B9E0DF0; Sun, 18 Nov 2018 05:28:37 +0000 (UTC) Received: from mail-pl1-x62f.google.com (mail-pl1-x62f.google.com [IPv6:2607:f8b0:4864:20::62f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id B4086E0DDB for ; Sun, 18 Nov 2018 05:28:36 +0000 (UTC) Received: by mail-pl1-x62f.google.com with SMTP id y6-v6so5455894plt.3 for ; Sat, 17 Nov 2018 21:28:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to; bh=/fgoOsNgee+lsWjtdYd+9PXRtWucoJ3O1YtMav/B4po=; b=iNN3vmrjKQF93sKfDCCSALpRcKrfaMXk1NO1v4+uZdfhPEucl7yuNsALwJ5/NKlsbs luvnIEcqCukfwg40Q1jF7731NfjuHZnDVgwtYa92fJ80mh00YEF3h/fkNTQO9noLQgHI tJC1wXytebHgePkCsps1P7wnWkiWK4CmAFYWqCusQZ9gDkOTGLWIywKIht04sth0LHSv Trd/ThjR5H00BwhwKVyeHRB7vbeDpLSXem5oBVi2h2RgNuwhi4rU3UUdX4ZYSfxI5QCF w8S3d54EJnP5idnD88bq+3km/3DgoS17XR00gpd1y5vYidJz3Xr4rOLzZXjR8XUj6wLw AN/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:openpgp:autocrypt :message-id:date:user-agent:mime-version:in-reply-to; bh=/fgoOsNgee+lsWjtdYd+9PXRtWucoJ3O1YtMav/B4po=; b=IliEyDtwD+dWXIW+zUnRANTpEoVbhQ40dCpqaA1cn5HSDIiL+l90+QOfYDYxF2LvyV 7MVc7BGElPQez80gU49mSW+7gmIkwCMnW5yI/gt6Ejrrb8tA1D9E8m9XRinggfdj05E4 ZRKDLrQG8vvcN2nNA+Nd7tsGEdsa8q9k3F/ByLjS6dzpU8V3FJCsOOmUTTNwVSxyEOK7 8A+2eOhudwiTWmcWNNjSTNPnbQTH2G9qCIGMhGKxvDAVyk3rl2mUVCKb9oV2x4wIJh4A A8lO5sOFcdFI9JB6hBKIg4Fvzw0JGll3jGRpk4fPTv0keVoCkSkOOEAMI3tPdywpITIO Wu0A== X-Gm-Message-State: AGRZ1gJ40oLGiiJKCCFIkraiSqXYYOpYp/MoBQ6yt/U01qz2Yp/Ba2DF FPudFCm+p7KN3CInuEuStBNInH96 X-Google-Smtp-Source: AJdET5cZQUxnZCoggJx6uUEEfy9XeSSiOW8RjOeB/xo/HEMwDBomEhXiSa7OkVvh/DrAeJoBI+EsDg== X-Received: by 2002:a17:902:a9:: with SMTP id a38-v6mr17535494pla.7.1542518914533; Sat, 17 Nov 2018 21:28:34 -0800 (PST) Received: from ?IPv6:2602:47:d690:3302:cb9d:f54c:72a3:dc79? ([2602:47:d690:3302:cb9d:f54c:72a3:dc79]) by smtp.gmail.com with ESMTPSA id f13sm9476002pfa.132.2018.11.17.21.28.32 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 17 Nov 2018 21:28:33 -0800 (PST) Subject: Re: [gentoo-user] systemd/dracut: Correctly boot using flash drive with LUKS key? To: gentoo-user@lists.gentoo.org References: <89A9AAF0-D6D1-422D-A861-C2E30CF1B75B@gmail.com> From: Andrew Udvare Openpgp: preference=signencrypt Autocrypt: addr=audvare@gmail.com; keydata= xsFNBFOdSyUBEAChmGHO21xk44a8sZTjAMK2G6NZpson6ekB6sGriYgFApDAEQGvnd5btdRH aObx8whfPb+NB2QshEKyBsRTtpwSfePuMzcNEYFVJGiuOH2EGx73zRmydpZxetBJaba3oWMY ivZ7MhoNsBO1bEYvyrmtXJBrotnMfMAH4HDIkRwEES4KtGXpNK6rVCXFiRNtwqaqeOmGPzEG soESrmi3hAFm4QUB0KAsvdQ49siFbZFZFNbVGAv1wqQa6xrTaNK3sw3rsRmj45wsMY/agWZC M6Jh9X9R2OMFV2ypqLCOOMF31Jiv/wV7i739EE8F9u2rCITa/ATC+0+9Lr22rcKudrkkY4Wg CMaKkmm619Edd5arDPo8GCCTqKNQjArvcl5jQHyxMsmiSFKG1MlhoFSeVCC/c0ScvEeziErn AuEvs9vjiNWwHN8+mXJMULi999Pqu85itjDc7OgyUSXY2ZvuDBimxOEN07Tfy4aoVov7Ulls l23XvRoHSD1h2SfJTqEJTu88s5P6TVgpszcaFpxuC8KS6guwW6s7SMkG4ujAdlowx0+MKs2Q /wiNYT4XcNmF8XBTrEgiIfVewxKgfthAWUCHNEJFrZpvruJxt31YuGPPp8CkhxxHTYMsyRpO 7RcRYGGNsgzXxLMX5zqbjqdUtns4p+6DKd4lhmYMcybOxb+ypwARAQABzSFBbmRyZXcgVWR2 YXJlIDxhdWR2YXJlQGdtYWlsLmNvbT7CwZMEEwEKAD0CGwMHCwkIBwMCAQYVCAIJCgsEFgID AQIeAQIXgAIZARYhBGCvdPOI709JMcCOOBr9mvwSDCbdBQJbJxjGAAoJEBr9mvwSDCbdH3wP +wcFbqwkmbusNdIpjjWEKlPj1spnU3oGr9ikByJUg5qKHDSwlCIaZAVqbIh0SD1DZvAami1P LUh0684MTf6HKs/+EPiy/7GqWpXihXw1wSawnPqmCqC91Vtd1+peXyMZCi7dx8PH/SSpnLmm jxtbMmn/qesxpTms+qEc+gksfu5F9mQ2RS1sazTCIf7eBgdNgq/beykXa8lZU9Ek9NjbG1pk Sq9hXgA/AUlaAFAXX80dvNkCYvVrgq8ucdfcbvESudBDr8Nt6eXeWOcwTYvJ2h7jetavqpZz rCu7SbL2tmVnj0uBgpkmdmOudU5OMw3M5f/y4PhnXGuwu4su43NRP7gyOVmItc36HEXSXwM8 tMbiHV/Rv1FdNxqf7OfKOimlYp8Psu7Ntd62byxuvyLSie4EUNBj0StxaNHUQ1FCiG7si4jE 2szWoRRUQDpPLe0PYfJQsCF7YXoEfrjUVRqqTGpDWovZ5SLlFx6TZpGSyYQBgJxfWXor/mcM i+nSfTUKFCFVNJObadpppgHVrT1HUGLy20dq3CLNwG8mAvYRMAUS51Q7ssIn/Rrd/ManSNa8 eDzfxSWD5L3gdYfluJeaaT9gCz/v7Q2wt80+Bpz1shDzqC524YAGtXhLJ680z9z8wpJwfr8p KD+3AA7Z5P9Z/e3jzdAXm7j3AXiLDJLgoRFRzsFNBFOdSyUBEADHokxkZ4FwDIqyf1ZULG/b vwEvK4UWqP0QmUTSHBdd+bgPWFT4YvUurFftgZaYay1GJaOPjYTy6+oeYFwIrb8RqKhcAR9l 4+U4MSlZniuxc1l8xVDUdX0zw6rP/L9wsDdW2lmnlNuOD7ZybwekeBp5N4on317r4TuetdFV IEDT+LrtJFl5FYU76Ru9l6g3M3HkLWFYocwsgyyAS7dZHXS4KXDZ96H9a9IVtxTh/XAJl/7x 395A0Nvjp8+cYvYm+pravw8ByF1UJ4PfqIMkwV8YwvCt185kvQXrBBgooozk4ryuSFzGlTkA jtrhJxnIZfzIaahyCd1ju/zbxmIwY5nfZVnCX4+dM9t7ei5iUZ1Qxhkf6Tl8gRwoKrKjjEay x7S5ob5Du3tOeyFInuOEjxtIRYcplCSy1Qb3jcGDF5osXugVxaxfwOJi1hRu1ntFHy7J3ibX cfYuBaruzT8OP9DVLWCyS/D8JQJ7PiRkMiNiITDilzK0hZo2i6oA0R7WNnqypeaZq+avQpAt rVwkK1wZApfxwjmBSngM6VTGCzOefvE8PNCd55UmT9tkByZq5iknCWF7rbie1wD6s9x5bwLX uK0Es5UV4lBOa4aSyW5hhFe0OFwflrVpKYC56yopHyUFVhx4BA31MsVNNmb0JUfZJ+blDhsP +ll+P8BzqF13tQARAQABwsF2BBgBAgAgAhsMFiEEYK9084jvT0kxwI44Gv2a/BIMJt0FAlsi aocACgkQGv2a/BIMJt3rcw/+Ku0d1/IAz4l+3wy6inDz/0bNBO7V7tXPydVgZOe1LwbCwMuk SN+rq9qhgCAM+A/5lwdRcmIlfbGTy9AyFc19p8yiIgksR0t0i8gqbu4Xs+RrQcFmZurBXoFc s28gOZI2/t5Tj455dET2amLZ2aiTDaYBbqxZa9vfS5alfWsnvd4fjW4Kr1rEstTFdfubCX/N BYsSiXSzfGkLgOjuiLDBA3TYtaTTNPC3mx8wC9wq80aF2xiZoGeUW2ecrBohmksgdgkcqqGk iG0cRDZX5O+h1RJ2gZu90MXIThxJmi0ne1c+oGpZfRkNSteDK/mFeK7RJTb9XrBiZuWOIjf7 dpMoQfGN4yjEqOvedFZeg6jE6wZiEzdCIwOJkf/uOtr2Ohd18hek4evdMzGzUVv4JzA/l8pg 9tIHf7d/7Am0aAbSMXv+TECKxLHDoOI7KQL/flgTy1Vdw4q/WJB8yirhoSng5XgrB1A3W8Fo 8m/G/Il9R5VGTPTMn4xe+UbMCBbLqoNfr5p3KWqSgqLQkP0YSt4G/Rcw5mJnbgGyw9UAM5wT PDT/BYzFQzmsk6467hsTjMBK3ka0VjKAJQ/AMfUgY9cLp4M/agkxDb0cKagvy0mf8argIgM0 005cauU1nTb0v+L9S9sDcVvHOjRVDBR9mRzRpoxbGiAcBObVqtMByta0tuA= Message-ID: <4f47e462-0db6-ae1a-99f1-b3857288e5a5@gmail.com> Date: Sun, 18 Nov 2018 00:28:31 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.3.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Dh60tvRFGv1PDe2q4tABhMg738jHquyPv" X-Archives-Salt: d06fc9f4-2514-4a56-bf09-e238ce952ca5 X-Archives-Hash: 8eee58cd408a859ac13d919ac55dd846 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Dh60tvRFGv1PDe2q4tABhMg738jHquyPv Content-Type: multipart/mixed; boundary="JShQ6whURoAJ3hg9EilUw3JEK4Vlrs9mE"; protected-headers="v1" From: Andrew Udvare To: gentoo-user@lists.gentoo.org Message-ID: <4f47e462-0db6-ae1a-99f1-b3857288e5a5@gmail.com> Subject: Re: [gentoo-user] systemd/dracut: Correctly boot using flash drive with LUKS key? References: <89A9AAF0-D6D1-422D-A861-C2E30CF1B75B@gmail.com> In-Reply-To: --JShQ6whURoAJ3hg9EilUw3JEK4Vlrs9mE Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 16/11/2018 14:43, Rich Freeman wrote: > On Fri, Nov 16, 2018 at 12:15 PM Andrew Udvare wrot= e: >> >> I am not sure if there is a way to move the systemd-cryptsetup@home.se= rvice up the dependency tree once it's working, which would then remove t= he mnt-chuan.mount dependency. >> >=20 > Ok, I did a bit more reading. You're using the cryptsetup generator > most likely. It sets up units to be oneshot+remainafterexit, which > means they're "active" whenever the LUKS device is mounted (without > any processes - but they show as active so that you can stop them and > unmount the device). It sets the RequiresMountsFor parameter for the > device the key file is contained on, which makes that mount service a > Required dependency. That means that it can't be unmounted while the > cryptsetup device is in use, and in theory attempting to unmount the > key file should make systemd attempt to unmount the cryptsetup device > (though busy filesystems could interfere with that). So it is a bit strange that /mnt/chuan was considered a dependency just because of mention in /etc/crypttab. However I found out that the reason has something to do with the /mnt/chuan entry in /etc/fstab in my real root, and this is not a necessary line (it is the only entry in the initrd fstab). I removed the line and now the dependency is still show with list-dependencies, but it is white instead of red. My system is still shown as running rather than degraded. Removing the line from /etc/fstab only partially solves the problem, as it's not explained what happens with the USB drive once the root is switched because after that it's not shown to be mounted. I am pretty sure it's not safely unmounted before the switch, which leaves it in a strange state requiring fsck. Don't know the best way around this other than wait till systemd supports the keyscript option in /etc/crypttab. --=20 Andrew --JShQ6whURoAJ3hg9EilUw3JEK4Vlrs9mE-- --Dh60tvRFGv1PDe2q4tABhMg738jHquyPv Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEYK9084jvT0kxwI44Gv2a/BIMJt0FAlvw+H8ACgkQGv2a/BIM Jt33NQ/8DLgylOHKtSezMKItKGAx5sbZb7Oah0FolyM5N5HQ/9tzFygnj0M8fHxY 7H/smqYqLgPuq2PsT8jU2b2iim5DBLCfnpgv0o7tj6tkFZQojaCNffFzj/876qdF PMMeENEnbZ8iQnVD4dte4xm5C/sUr3iwm5HlSz8j7DAgZzgPjso9NhXymEVzd/T4 JPHRetRECml/VoZxmSr1sJzDzBo2MfdQAFd/v78lGEdUhr2P+xi303F4M6pBzrCD U0mcEUUggwJk+pVec9G6477Ls2T9WZqRk5/VYsJWL5bmCCfUDaqVald/dNroRmXE yEY2Ghl6O4+Pm5tnSF5cjlCzHaSI0gnp3rOMVyiMha144b+do5A44Tlb6RSI03os baw0mxvDS9rujsAl5KDbhiw0KDZ2P29E67SDBLdzSkjgSA2K/sRj2M3uyBlY76/2 rbjh50/kwxo0cjpfh6jh0AceTlvx8io6Y15ucjijVKZH9bkb61eEZzElnBxUCSS0 vwbMC3GanLW1IjFcDKYAgz1BAn3FpM0JBcfVm10tIvVNCmt8nPkTTPSXBZt/na3l 4xILNGF0mVCMaDK/p5MsW5m1/p2neCOmYmnSLqzg7RBjTvP9ijBt0vPJyuLxRZEE Dw2HnKR3kcU3kk8GUG9tp+AYDuOMia6O9hQ49dLF5/e42V05YU0= =3psN -----END PGP SIGNATURE----- --Dh60tvRFGv1PDe2q4tABhMg738jHquyPv--