Pam_mount plugin can not deal with LUKS2 volume (but is ok with LUKS1). Unfortunately, mageia installation uses LUKS2 to crypt new volumes. For a patch and more details please see: https://bugs.launchpad.net/ubuntu/+source/libpam-mount/+bug/1804408 The patch works well: I did a rebuild of the rpm integrating this patch. So please add the patch.
Thank you Vincent both for the alert, and identifying the solution. Assigning to ChrisD as the 'pam_mount' maintainer.
Assignee: bugsquad => eatdirt
Great, I'll push that! thanks
pam_mount-2.16-6.1.mga7 is landing on core/updates_testing. I don't have a luks2 encrypted volume, if Vincent D could provide some test, that would be nice. Thanks!
I can confirm this new package works fine with LUKS 2 volumes. Thanks !
For QA team, we would need some tester knowing already how to use pam_mount, and they should check that luks2 encrypted volume are correctly mounted, but also luks legacy ones, namely that we do not break the backward compatibility. Suggested advisory: ======================== Updated pam_mount packages to support luks2 encrypted volumes. References: https://bugs.mageia.org/show_bug.cgi?id=25574 ======================== Updated packages in core/updates_testing: ======================== pam_mount-2.16-6.1.mga7 lib(64)cryptmount0-2.16-6.1.mga7 lib(64)cryptmount-devel-2.16-6.1.mga7 Source RPMs: pam_mount-2.16-6.1.mga7.src
CC: (none) => eatdirtAssignee: eatdirt => qa-bugs
I can confirm LUKS2 and LUKS1 volumes are correctly mounted using the updated packages (note that both libcryptmount and pam_mount need to be installed). My current computer is using one old LUKS1 volume, and a new LUKS2 one, and everything is working as expected. Thanks !
(In reply to Vincent D from comment #6) > I can confirm LUKS2 and LUKS1 volumes are correctly mounted using the > updated packages (note that both libcryptmount and pam_mount need to be > installed). > > My current computer is using one old LUKS1 volume, and a new LUKS2 one, and > everything is working as expected. > > Thanks ! Setting ok based on your test. I personally don't use pam_mount or LUKS2. It would be nice, if you document your test as sample procedure for future. Ulrich
Whiteboard: (none) => MGA7-64-OKCC: (none) => bequimao.de
Validating on the basis of Vincent's test. Advisory in Comment 5.
Keywords: (none) => validated_updateCC: (none) => andrewsfarm, sysadmin-bugs
CC: (none) => tmbKeywords: (none) => advisory
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGAA-2019-0216.html
Status: NEW => RESOLVEDResolution: (none) => FIXED