Re: auto unlock encrypted disks using clevis/tang works for ext4 but not btrfs?

[Barry Scott]

> On 11 Jun 2022, at 18:36, Barry  wrote:
> > On 10 Jun 2022, at 23:09, Gordon Messmer  wrote:
> >
> > On 6/10/22 11:29, Barry Scott wrote:
> > > What logs do I need to collect?
> >
> > I'd start by looking at "journalctl -b0"
> >
> > You might be able to find clevis information in there.
>
> Already did that and there is nothing that stands out.

I have been slowly reproducing the issue and checking logs.
I found an error from clevis - no network!

The initramfs does not contain any code to bring up the network.

On the system that works I use systemd-networkd and that is in
the initramfs.

But on the system that does not work its was using NetworkManager
and the initramfs has not network modules init.

I changed the system to use systemd-networkd and stopped using NetworkManager.
But dracut does not add systemd-networkd to the initramfs.

I spent some time trying to figure out why by adding echo statements to the dracut
code, but I'm no closer to understanding why systemd-networkd is not added.

What I did do is:

$ dracut -f --add systemd-networkd

and that makes clevis unlocking work.

I'll add a dracut conf file to force this on.

I think this is worth raising as a bugzilla and will do that.

Barry
> > Another interesting item might be to run "ls -l /boot/initramfs-$(uname -r).img > initramfs-$(hostname)" and to diff the two resulting files.
>
> Will do might give a clue. But I see both systems cause the tang server to log key lookups, so I think the init is setup.
> I am planning the read the source of the Clovis pieces to see what they will log.
>
> Barry
> > users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]
> > Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
>
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure