Skip to content

bugfix : require passphrase to auto mount encrypted LUKS partition on thumb drive #2029

Open
tlaurion wants to merge 1 commit intolinuxboot:masterfrom
tlaurion:bugfix_ask_luks_passphrase_for_public_key_export
Open

bugfix : require passphrase to auto mount encrypted LUKS partition on thumb drive #2029
tlaurion wants to merge 1 commit intolinuxboot:masterfrom
tlaurion:bugfix_ask_luks_passphrase_for_public_key_export

Conversation

@tlaurion
Copy link
Collaborator

@tlaurion tlaurion commented Nov 20, 2025 •
edited
Loading

and add debug statements (so that public key can be saved on luks encrypted partition from Factory reset /re-ownership wizard).

closes #2028

@tlaurion
bugfix : require passphrase to mount encrypted LUKS partition (and ad…
0f9063f 
…d debug statements)

Signed-off-by: Thierry Laurion <insurgo@riseup.net>
@tlaurion
Copy link
Collaborator Author

tlaurion commented Nov 20, 2025

This PR (after having done oem factory reset with questionnaire saying yes to provision encrypted usb thumb drive backup of gpg key material, and then redoing re-ownership without and saving public key over encrypted luks container's ext4 partition):

./docker_repro.sh make BOARD=qemu-coreboot-fbwhiptail-tpm2
./docker_repro.sh make BOARD=qemu-coreboot-fbwhiptail-tpm2 run

!!! Hit enter to proceed to recovery shell !!!
[    8.214443] DEBUG: Loading linux kernel shipped keyboard layout keymap: share/keymaps/defkeymap.map
[    8.290969] DEBUG: loadkeys --default
[    8.533777] DEBUG: Loading keyboard keymap: /usr/lib/kbd/keymaps/i386/qwerty/us.map
[    8.612218] DEBUG: loadkeys /usr/lib/kbd/keymaps/i386/qwerty/us.map
[    9.028296] TRACE: /bin/setconsolefont.sh(6): main
[    9.112380] DEBUG: Keep default console font size due to framebuffer height 768
[    9.307207] TRACE: /bin/gui-init(631): main
[    9.331264] TRACE: /etc/functions(1154): detect_boot_device
[    9.781864] TRACE: /etc/functions(1110): mount_possible_boot_device
[    9.850400] TRACE: /etc/functions(1070): is_gpt_bios_grub
[    9.952928] TRACE: /dev/vda1 is partition 1 of vda
[   10.065760] TRACE: /etc/functions(1047): find_lvm_vg_name
[   10.215439] TRACE: /etc/functions(1137): mount_possible_boot_device
[   10.268538] DEBUG: Try mounting /dev/vda1 as /boot
[   10.347515] EXT4-fs (vda1): mounted filesystem with ordered data mode. Quota mode: disabled.
[   10.408168] TRACE: /bin/gui-init(310): clean_boot_check
[   10.507573] TRACE: /bin/gui-init(338): check_gpg_key
[   60.978269] TRACE: /bin/oem-factory-reset(12): main
[   61.048812] DEBUG: CONFIG_BOARD_NAME='qemu-coreboot-fbwhiptail-tpm2'
[   61.119202] DEBUG: Detected qemu board name matches 'qemu-*' -> applying Canokey workaround
[   61.182061] DEBUG: RSA_KEY_LENGTH before override: 3072
[   61.268759] DEBUG: Overriding RSA_KEY_LENGTH to 2048 bits for Canokey under qemu testing boards (Canokey firmware under qemu currently limited to RSA-2048)
[   61.339769] DEBUG: RSA_KEY_LENGTH after override: 2048
[   63.878819] TRACE: /bin/oem-factory-reset(146): mount_boot
[   63.948396] TRACE: /bin/oem-factory-reset(858): report_integrity_measurements
[   64.070027] TRACE: /bin/oem-factory-reset(924): report_integrity_measurements
[   64.134579] TRACE: /bin/oem-factory-reset(988): main
[  259.700810] TRACE: /bin/mount-usb(7): main
[  259.732216] DEBUG: Parameters: --mode=rw, --device=empty, --mountpoint=/media, --pass=
[  259.767442] TRACE: /etc/functions(388): enable_usb
[  259.849660] TRACE: /sbin/insmod(9): main
[  260.073000] TPM: Extending PCR[5] with /lib/modules/ehci-hcd.ko and parameters '' before loading
[  260.111709] TRACE: /sbin/insmod(53): main
[  260.163582] No module parameters, extending only with the module's content
[  260.268720] TRACE: /bin/tpmr(847): main
[  260.291320] TPM: Extending PCR[5] with /lib/modules/ehci-hcd.ko
[  260.318904] TRACE: /bin/tpmr(233): tpm2_extend
[  260.354603] TRACE: /bin/tpmr(249): tpm2_extend
[  260.409344] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/ehci-hcd.ko
[  260.576608] sha256: 5 : 0x909690BD6F97E04B50958166F992B414D81A0D36B732B6A7DA951763541D1CF5
[  260.589735] TRACE: /bin/tpmr(262): tpm2_extend
[  260.651835] DEBUG: TPM: Extended PCR[5] with hash 24eae3f2a147c715bd7e0c0ca362f2fe4d6def6925cfea8a06f3a243bd07bf58
[  260.711864] DEBUG: Loading /lib/modules/ehci-hcd.ko with busybox insmod
[  260.826075] TRACE: /sbin/insmod(9): main
[  261.015419] TPM: Extending PCR[5] with /lib/modules/uhci-hcd.ko and parameters '' before loading
[  261.047233] TRACE: /sbin/insmod(53): main
[  261.095596] No module parameters, extending only with the module's content
[  261.195484] TRACE: /bin/tpmr(847): main
[  261.211823] TPM: Extending PCR[5] with /lib/modules/uhci-hcd.ko
[  261.245529] TRACE: /bin/tpmr(233): tpm2_extend
[  261.265493] TRACE: /bin/tpmr(249): tpm2_extend
[  261.345754] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/uhci-hcd.ko
[  261.556720] sha256: 5 : 0x8EC9D2802F8413D4F6C607B73A5103E568ED77E62FB9EEA6EDFDD5EF2693DFDF
[  261.569673] TRACE: /bin/tpmr(262): tpm2_extend
[  261.622937] DEBUG: TPM: Extended PCR[5] with hash 351589f2423438d7e7bcfab17d1065da794185fd105a2eaa70938f84635aa1f4
[  261.671445] DEBUG: Loading /lib/modules/uhci-hcd.ko with busybox insmod
[  261.696417] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[  261.696998] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
[  261.698127] uhci_hcd 0000:00:1d.0: detected 2 ports
[  261.698963] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000ff00
[  261.728724] hub 1-0:1.0: USB hub found
[  261.730563] hub 1-0:1.0: 2 ports detected
[  261.739930] uhci_hcd 0000:00:1d.1: UHCI Host Controller
[  261.741285] uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 2
[  261.742584] uhci_hcd 0000:00:1d.1: detected 2 ports
[  261.743771] uhci_hcd 0000:00:1d.1: irq 17, io port 0x0000fee0
[  261.749398] hub 2-0:1.0: USB hub found
[  261.751583] hub 2-0:1.0: 2 ports detected
[  261.757706] uhci_hcd 0000:00:1d.2: UHCI Host Controller
[  261.758317] uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 3
[  261.762253] uhci_hcd 0000:00:1d.2: detected 2 ports
[  261.765456] uhci_hcd 0000:00:1d.2: irq 18, io port 0x0000fec0
[  261.770570] hub 3-0:1.0: USB hub found
[  261.780590] hub 3-0:1.0: 2 ports detected
[  261.877730] TRACE: /sbin/insmod(9): main
[  262.005303] TPM: Extending PCR[5] with /lib/modules/ohci-hcd.ko and parameters '' before loading
[  262.055208] TRACE: /sbin/insmod(53): main
[  262.113637] No module parameters, extending only with the module's content
[  262.220066] TRACE: /bin/tpmr(847): main
[  262.239041] TPM: Extending PCR[5] with /lib/modules/ohci-hcd.ko
[  262.283316] TRACE: /bin/tpmr(233): tpm2_extend
[  262.330311] TRACE: /bin/tpmr(249): tpm2_extend
[  262.416132] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/ohci-hcd.ko
[  262.585710] sha256: 5 : 0x5A5A2C556E0204C43F40A8B45CA0FC19CFDFA97F6CFEBBD0D37AF8C342916F4A
[  262.613772] TRACE: /bin/tpmr(262): tpm2_extend
[  262.675292] DEBUG: TPM: Extended PCR[5] with hash 355261b550b90c17b3d7de6306b63d4ac81b3901eb3e698718feb8f9e455beac
[  262.751051] DEBUG: Loading /lib/modules/ohci-hcd.ko with busybox insmod
[  262.882844] TRACE: /sbin/insmod(9): main
[  263.078050] TPM: Extending PCR[5] with /lib/modules/ohci-pci.ko and parameters '' before loading
[  263.092635] TRACE: /sbin/insmod(53): main
[  263.143630] No module parameters, extending only with the module's content
[  263.250170] TRACE: /bin/tpmr(847): main
[  263.283604] TPM: Extending PCR[5] with /lib/modules/ohci-pci.ko
[  263.335784] TRACE: /bin/tpmr(233): tpm2_extend
[  263.379676] TRACE: /bin/tpmr(249): tpm2_extend
[  263.431796] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/ohci-pci.ko
[  263.658390] sha256: 5 : 0x8BA29C95378766C29BEEFB929839549069585709C32EA253F4E11234766039C1
[  263.704013] TRACE: /bin/tpmr(262): tpm2_extend
[  263.780612] DEBUG: TPM: Extended PCR[5] with hash fc9a0bcce7dbf1e2c47f138f8f4fb30b26973686d3e3fe671f82848af7fd28c3
[  263.854203] DEBUG: Loading /lib/modules/ohci-pci.ko with busybox insmod
[  263.952454] TRACE: /sbin/insmod(9): main
[  264.069685] TPM: Extending PCR[5] with /lib/modules/ehci-pci.ko and parameters '' before loading
[  264.088175] TRACE: /sbin/insmod(53): main
[  264.131445] No module parameters, extending only with the module's content
[  264.278276] TRACE: /bin/tpmr(847): main
[  264.314784] TPM: Extending PCR[5] with /lib/modules/ehci-pci.ko
[  264.376793] TRACE: /bin/tpmr(233): tpm2_extend
[  264.430645] TRACE: /bin/tpmr(249): tpm2_extend
[  264.504291] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/ehci-pci.ko
[  264.705080] sha256: 5 : 0x3479F0982F2000A4052ADA1FA5485239FCD86C0EAD6F624FC300DA8A29C6157A
[  264.746389] TRACE: /bin/tpmr(262): tpm2_extend
[  264.837013] DEBUG: TPM: Extended PCR[5] with hash 70c868f3f436e7ae7daaa0b070ecc024309e634cb3cd6387394249e69a8e7f58
[  264.902524] DEBUG: Loading /lib/modules/ehci-pci.ko with busybox insmod
[  264.935293] ehci-pci 0000:00:1d.7: EHCI Host Controller
[  264.938981] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 4
[  264.945887] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfcf80000
[  264.966025] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[  264.976728] hub 4-0:1.0: USB hub found
[  264.980739] hub 4-0:1.0: 6 ports detected
[  264.990862] hub 1-0:1.0: USB hub found
[  265.002533] hub 1-0:1.0: 2 ports detected
[  265.019888] hub 2-0:1.0: USB hub found
[  265.023399] hub 2-0:1.0: 2 ports detected
[  265.033069] hub 3-0:1.0: USB hub found
[  265.049717] hub 3-0:1.0: 2 ports detected
[  265.164554] TRACE: /sbin/insmod(9): main
[  265.327299] TPM: Extending PCR[5] with /lib/modules/xhci-hcd.ko and parameters '' before loading
[  265.344871] TRACE: /sbin/insmod(53): main
[  265.408232] No module parameters, extending only with the module's content
[  265.516294] TRACE: /bin/tpmr(847): main
[  265.530482] TPM: Extending PCR[5] with /lib/modules/xhci-hcd.ko
[  265.562607] TRACE: /bin/tpmr(233): tpm2_extend
[  265.627658] TRACE: /bin/tpmr(249): tpm2_extend
[  265.698357] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/xhci-hcd.ko
[  265.883671] sha256: 5 : 0x76B689397B52935FCC087204CBFCAD42442577A38025DACC0C6481BFDC8609B4
[  265.910935] TRACE: /bin/tpmr(262): tpm2_extend
[  265.979635] DEBUG: TPM: Extended PCR[5] with hash 5777b543e7a375a39ce486d83a5ff02dcaf5ec2d26356818d8ed0619224f31b3
[  266.056884] DEBUG: Loading /lib/modules/xhci-hcd.ko with busybox insmod
[  266.179432] TRACE: /sbin/insmod(9): main
[  266.313378] TPM: Extending PCR[5] with /lib/modules/xhci-pci.ko and parameters '' before loading
[  266.344234] TRACE: /sbin/insmod(53): main
[  266.385085] No module parameters, extending only with the module's content
[  266.596305] TRACE: /bin/tpmr(847): main
[  266.645599] TPM: Extending PCR[5] with /lib/modules/xhci-pci.ko
[  266.711436] TRACE: /bin/tpmr(233): tpm2_extend
[  266.787983] TRACE: /bin/tpmr(249): tpm2_extend
[  266.858867] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/xhci-pci.ko
[  267.029836] sha256: 5 : 0x4BB1E1405AD1FA13B66FE9BB465B0DB0F18CA317B9802CE40D42589ACE26BF0E
[  267.088948] TRACE: /bin/tpmr(262): tpm2_extend
[  267.163202] DEBUG: TPM: Extended PCR[5] with hash 7a3d34fe568abab53b827ff77d4c51f21a7057111c8afcc4c91e775f92ed3488
[  267.243083] DEBUG: Loading /lib/modules/xhci-pci.ko with busybox insmod
[  267.276665] xhci_hcd 0000:00:04.0: xHCI Host Controller
[  267.279726] xhci_hcd 0000:00:04.0: new USB bus registered, assigned bus number 5
[  267.285674] xhci_hcd 0000:00:04.0: hcc params 0x00087001 hci version 0x100 quirks 0x0000000000000010
[  267.291945] xhci_hcd 0000:00:04.0: xHCI Host Controller
[  267.299269] xhci_hcd 0000:00:04.0: new USB bus registered, assigned bus number 6
[  267.302693] xhci_hcd 0000:00:04.0: Host supports USB 3.0 SuperSpeed
[  267.311751] hub 5-0:1.0: USB hub found
[  267.316031] hub 5-0:1.0: 4 ports detected
[  267.371087] usb usb6: We don't know the algorithms for LPM for this host, disabling LPM.
[  267.378234] hub 6-0:1.0: USB hub found
[  267.381759] hub 6-0:1.0: 4 ports detected
[  267.631527] usb 5-1: new high-speed USB device number 2 using xhci_hcd
[  267.930791] usb 6-2: new SuperSpeed USB device number 2 using xhci_hcd
[  268.085448] usb 5-3: new full-speed USB device number 3 using xhci_hcd
[  269.462412] TRACE: /etc/functions(646): enable_usb_storage
[  269.598986] TRACE: /sbin/insmod(9): main
[  269.754920] TPM: Extending PCR[5] with /lib/modules/usb-storage.ko and parameters '' before loading
[  269.775977] TRACE: /sbin/insmod(53): main
[  269.814683] No module parameters, extending only with the module's content
[  269.943385] TRACE: /bin/tpmr(847): main
[  269.981987] TPM: Extending PCR[5] with /lib/modules/usb-storage.ko
[  270.042538] TRACE: /bin/tpmr(233): tpm2_extend
[  270.096321] TRACE: /bin/tpmr(249): tpm2_extend
[  270.177050] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/usb-storage.ko
[  270.340986] sha256: 5 : 0x7F34911761A0F0E7FF50E024F3840B0A2F95B7103E07FAACD3E70054BBD68CB6
[  270.380976] TRACE: /bin/tpmr(262): tpm2_extend
[  270.445318] DEBUG: TPM: Extended PCR[5] with hash 17f654dd3940e8d163effb16581830ee2eee7ea0bd9229c669a7533e324fc07d
[  270.501976] DEBUG: Loading /lib/modules/usb-storage.ko with busybox insmod
[  270.552725] usb-storage 6-2:1.0: USB Mass Storage device detected
[  270.560190] scsi host6: usb-storage 6-2:1.0
[  270.573246] usbcore: registered new interface driver usb-storage
[  270.654568] TRACE: /etc/functions(683): list_usb_storage
[  270.725720] DEBUG: Listing USB storage devices (including partitions)
[  271.599868] scsi 6:0:0:0: Direct-Access     QEMU     QEMU HARDDISK    2.5+ PQ: 0 ANSI: 5
[  271.615888] sd 6:0:0:0: Power-on or device reset occurred
[  271.620554] sd 6:0:0:0: Attached scsi generic sg1 type 0
[  271.625793] sd 6:0:0:0: [sda] 524288 512-byte logical blocks: (268 MB/256 MiB)
[  271.646360] sd 6:0:0:0: [sda] Write Protect is off
[  271.652046] sd 6:0:0:0: [sda] Mode Sense: 63 00 00 08
[  271.661988] sd 6:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[  271.673579]  sda: sda1 sda2
[  271.678767] sd 6:0:0:0: [sda] Attached SCSI disk
[  271.901391] TRACE: /etc/functions(683): list_usb_storage
[  271.965672] DEBUG: Listing USB storage devices (including partitions)
[  272.099586] DEBUG: USB storage device of size greater then 0: /sys/block/sda
[  272.200949] DEBUG: USB storage device with partition table: /dev/sda
[  272.290943] DEBUG: Cleaning /media directory
[  272.333211] TRACE: /etc/functions(683): list_usb_storage
[  272.434262] DEBUG: Listing USB storage devices (including partitions)
[  272.592204] DEBUG: USB storage device of size greater then 0: /sys/block/sda
[  272.738439] DEBUG: USB storage device with partition table: /dev/sda
[  276.430360] DEBUG: Checking if /dev/sda1 is a LUKS device/partition
[  276.557836] DEBUG: Selected USB partition is a LUKS device
[  276.651425] DEBUG: Opening LUKS device /dev/sda1
[  279.685576] DEBUG: LUKS: PASS non-empty — prompting on console for /dev/sda1 (attempt 1/3)
[  279.765094] DEBUG: LUKS: received passphrase (length=5)
[  279.851839] DEBUG: LUKS: opening mapping usb_mount_sda1 (attempt 1)
[  282.542139] DEBUG: LUKS: opening mapping usb_mount_sda1 failed (attempt 1)
[  288.457763] DEBUG: LUKS: PASS non-empty — prompting on console for /dev/sda1 (attempt 2/3)
[  288.508669] DEBUG: LUKS: received passphrase (length=8)
[  288.584243] DEBUG: LUKS: opening mapping usb_mount_sda1 (attempt 2)
[  291.357632] DEBUG: LUKS: opening mapping usb_mount_sda1 succeeded
[  291.410012]  *** WARNING: Note that you cannot boot from a mounted encrypted device ***
[  292.480466] DEBUG: Setting USB_MOUNT_DEVICE=/dev/mapper/usb_mount_sda1
[  292.554029] DEBUG: Mounting /dev/mapper/usb_mount_sda1 as read-write
[  292.658274] EXT4-fs (dm-0): mounted filesystem with ordered data mode. Quota mode: disabled.

@tlaurion
Copy link
Collaborator Author

tlaurion commented Nov 20, 2025

Otherwise on master's debug log


!!! Hit enter to proceed to recovery shell !!!
[    9.918388] DEBUG: Loading linux kernel shipped keyboard layout keymap: share/keymaps/defkeymap.map
[    9.965181] DEBUG: loadkeys --default
[   10.165648] DEBUG: Loading keyboard keymap: /usr/lib/kbd/keymaps/i386/qwerty/us.map
[   10.224622] DEBUG: loadkeys /usr/lib/kbd/keymaps/i386/qwerty/us.map
[   10.743039] TRACE: /bin/setconsolefont.sh(6): main
[   10.844881] DEBUG: Keep default console font size due to framebuffer height 768
[   11.108544] TRACE: /bin/gui-init(631): main
[   11.170969] TRACE: /etc/functions(1154): detect_boot_device
[   11.599663] TRACE: /etc/functions(1110): mount_possible_boot_device
[   11.695701] TRACE: /etc/functions(1070): is_gpt_bios_grub
[   11.822217] TRACE: /dev/vda1 is partition 1 of vda
[   12.068599] TRACE: /etc/functions(1047): find_lvm_vg_name
[   12.256183] TRACE: /etc/functions(1137): mount_possible_boot_device
[   12.305895] DEBUG: Try mounting /dev/vda1 as /boot
[   12.406135] EXT4-fs (vda1): mounted filesystem with ordered data mode. Quota mode: disabled.
[   12.499688] TRACE: /bin/gui-init(310): clean_boot_check
[   12.624587] TRACE: /bin/gui-init(338): check_gpg_key
[   18.623392] TRACE: /bin/oem-factory-reset(12): main
[   18.720070] DEBUG: Overriding RSA_KEY_LENGTH to 2048 bits for Canokey under qemu testing boards
[   22.881448] TRACE: /bin/oem-factory-reset(141): mount_boot
[   22.942389] TRACE: /bin/oem-factory-reset(853): report_integrity_measurements
[   23.079649] TRACE: /bin/oem-factory-reset(919): report_integrity_measurements
[   23.162451] TRACE: /bin/oem-factory-reset(983): main
[   26.060519] TRACE: /bin/mount-usb(7): main
[   26.094385] DEBUG: Parameters: --mode=rw, --device=empty, --mountpoint=/media, --pass=
[   26.117832] TRACE: /etc/functions(388): enable_usb
[   26.225790] TRACE: /sbin/insmod(9): main
[   26.377446] TPM: Extending PCR[5] with /lib/modules/ehci-hcd.ko and parameters '' before loading
[   26.393226] TRACE: /sbin/insmod(53): main
[   26.445627] No module parameters, extending only with the module's content
[   26.598507] TRACE: /bin/tpmr(847): main
[   26.625904] TPM: Extending PCR[5] with /lib/modules/ehci-hcd.ko
[   26.665454] TRACE: /bin/tpmr(233): tpm2_extend
[   26.709495] TRACE: /bin/tpmr(249): tpm2_extend
[   26.764697] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/ehci-hcd.ko
[   27.064497] sha256: 5 : 0x909690BD6F97E04B50958166F992B414D81A0D36B732B6A7DA951763541D1CF5
[   27.106961] TRACE: /bin/tpmr(262): tpm2_extend
[   27.185677] DEBUG: TPM: Extended PCR[5] with hash 24eae3f2a147c715bd7e0c0ca362f2fe4d6def6925cfea8a06f3a243bd07bf58
[   27.271340] DEBUG: Loading /lib/modules/ehci-hcd.ko with busybox insmod
[   27.417190] TRACE: /sbin/insmod(9): main
[   27.544896] TPM: Extending PCR[5] with /lib/modules/uhci-hcd.ko and parameters '' before loading
[   27.557189] TRACE: /sbin/insmod(53): main
[   27.586468] No module parameters, extending only with the module's content
[   27.731871] TRACE: /bin/tpmr(847): main
[   27.756202] TPM: Extending PCR[5] with /lib/modules/uhci-hcd.ko
[   27.790362] TRACE: /bin/tpmr(233): tpm2_extend
[   27.826736] TRACE: /bin/tpmr(249): tpm2_extend
[   27.872653] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/uhci-hcd.ko
[   28.045868] sha256: 5 : 0x8EC9D2802F8413D4F6C607B73A5103E568ED77E62FB9EEA6EDFDD5EF2693DFDF
[   28.061366] TRACE: /bin/tpmr(262): tpm2_extend
[   28.135707] DEBUG: TPM: Extended PCR[5] with hash 351589f2423438d7e7bcfab17d1065da794185fd105a2eaa70938f84635aa1f4
[   28.202032] DEBUG: Loading /lib/modules/uhci-hcd.ko with busybox insmod
[   28.230307] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[   28.231593] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1
[   28.232914] uhci_hcd 0000:00:1d.0: detected 2 ports
[   28.234044] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000ff00
[   28.253217] hub 1-0:1.0: USB hub found
[   28.254399] hub 1-0:1.0: 2 ports detected
[   28.269406] uhci_hcd 0000:00:1d.1: UHCI Host Controller
[   28.270282] uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 2
[   28.272079] uhci_hcd 0000:00:1d.1: detected 2 ports
[   28.272779] uhci_hcd 0000:00:1d.1: irq 17, io port 0x0000fee0
[   28.278412] hub 2-0:1.0: USB hub found
[   28.278871] hub 2-0:1.0: 2 ports detected
[   28.284883] uhci_hcd 0000:00:1d.2: UHCI Host Controller
[   28.285683] uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 3
[   28.298764] uhci_hcd 0000:00:1d.2: detected 2 ports
[   28.303659] uhci_hcd 0000:00:1d.2: irq 18, io port 0x0000fec0
[   28.315381] hub 3-0:1.0: USB hub found
[   28.324823] hub 3-0:1.0: 2 ports detected
[   28.457592] TRACE: /sbin/insmod(9): main
[   28.589911] TPM: Extending PCR[5] with /lib/modules/ohci-hcd.ko and parameters '' before loading
[   28.609943] TRACE: /sbin/insmod(53): main
[   28.634707] No module parameters, extending only with the module's content
[   28.732760] TRACE: /bin/tpmr(847): main
[   28.754548] TPM: Extending PCR[5] with /lib/modules/ohci-hcd.ko
[   28.804359] TRACE: /bin/tpmr(233): tpm2_extend
[   28.829687] TRACE: /bin/tpmr(249): tpm2_extend
[   28.918573] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/ohci-hcd.ko
[   29.081327] sha256: 5 : 0x5A5A2C556E0204C43F40A8B45CA0FC19CFDFA97F6CFEBBD0D37AF8C342916F4A
[   29.096910] TRACE: /bin/tpmr(262): tpm2_extend
[   29.162466] DEBUG: TPM: Extended PCR[5] with hash 355261b550b90c17b3d7de6306b63d4ac81b3901eb3e698718feb8f9e455beac
[   29.206450] DEBUG: Loading /lib/modules/ohci-hcd.ko with busybox insmod
[   29.304681] TRACE: /sbin/insmod(9): main
[   29.499807] TPM: Extending PCR[5] with /lib/modules/ohci-pci.ko and parameters '' before loading
[   29.534717] TRACE: /sbin/insmod(53): main
[   29.585897] No module parameters, extending only with the module's content
[   29.696289] TRACE: /bin/tpmr(847): main
[   29.714076] TPM: Extending PCR[5] with /lib/modules/ohci-pci.ko
[   29.757774] TRACE: /bin/tpmr(233): tpm2_extend
[   29.775063] TRACE: /bin/tpmr(249): tpm2_extend
[   29.822043] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/ohci-pci.ko
[   29.975990] sha256: 5 : 0x8BA29C95378766C29BEEFB929839549069585709C32EA253F4E11234766039C1
[   29.993129] TRACE: /bin/tpmr(262): tpm2_extend
[   30.050706] DEBUG: TPM: Extended PCR[5] with hash fc9a0bcce7dbf1e2c47f138f8f4fb30b26973686d3e3fe671f82848af7fd28c3
[   30.146493] DEBUG: Loading /lib/modules/ohci-pci.ko with busybox insmod
[   30.257793] TRACE: /sbin/insmod(9): main
[   30.377546] TPM: Extending PCR[5] with /lib/modules/ehci-pci.ko and parameters '' before loading
[   30.399391] TRACE: /sbin/insmod(53): main
[   30.426570] No module parameters, extending only with the module's content
[   30.545523] TRACE: /bin/tpmr(847): main
[   30.560061] TPM: Extending PCR[5] with /lib/modules/ehci-pci.ko
[   30.586925] TRACE: /bin/tpmr(233): tpm2_extend
[   30.622011] TRACE: /bin/tpmr(249): tpm2_extend
[   30.677609] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/ehci-pci.ko
[   30.895292] sha256: 5 : 0x3479F0982F2000A4052ADA1FA5485239FCD86C0EAD6F624FC300DA8A29C6157A
[   30.966710] TRACE: /bin/tpmr(262): tpm2_extend
[   31.102931] DEBUG: TPM: Extended PCR[5] with hash 70c868f3f436e7ae7daaa0b070ecc024309e634cb3cd6387394249e69a8e7f58
[   31.186342] DEBUG: Loading /lib/modules/ehci-pci.ko with busybox insmod
[   31.253953] ehci-pci 0000:00:1d.7: EHCI Host Controller
[   31.266994] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 4
[   31.274452] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfcf80000
[   31.302471] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[   31.318957] hub 4-0:1.0: USB hub found
[   31.324192] hub 4-0:1.0: 6 ports detected
[   31.329983] hub 1-0:1.0: USB hub found
[   31.347841] hub 1-0:1.0: 2 ports detected
[   31.356559] hub 2-0:1.0: USB hub found
[   31.375862] hub 2-0:1.0: 2 ports detected
[   31.399532] hub 3-0:1.0: USB hub found
[   31.414609] hub 3-0:1.0: 2 ports detected
[   31.581789] TRACE: /sbin/insmod(9): main
[   31.766490] TPM: Extending PCR[5] with /lib/modules/xhci-hcd.ko and parameters '' before loading
[   31.835382] TRACE: /sbin/insmod(53): main
[   31.867299] No module parameters, extending only with the module's content
[   31.997184] TRACE: /bin/tpmr(847): main
[   32.055739] TPM: Extending PCR[5] with /lib/modules/xhci-hcd.ko
[   32.115161] TRACE: /bin/tpmr(233): tpm2_extend
[   32.164532] TRACE: /bin/tpmr(249): tpm2_extend
[   32.239918] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/xhci-hcd.ko
[   32.528338] sha256: 5 : 0x76B689397B52935FCC087204CBFCAD42442577A38025DACC0C6481BFDC8609B4
[   32.559120] TRACE: /bin/tpmr(262): tpm2_extend
[   32.665992] DEBUG: TPM: Extended PCR[5] with hash 5777b543e7a375a39ce486d83a5ff02dcaf5ec2d26356818d8ed0619224f31b3
[   32.748891] DEBUG: Loading /lib/modules/xhci-hcd.ko with busybox insmod
[   32.888451] TRACE: /sbin/insmod(9): main
[   33.086976] TPM: Extending PCR[5] with /lib/modules/xhci-pci.ko and parameters '' before loading
[   33.102569] TRACE: /sbin/insmod(53): main
[   33.138829] No module parameters, extending only with the module's content
[   33.238515] TRACE: /bin/tpmr(847): main
[   33.252032] TPM: Extending PCR[5] with /lib/modules/xhci-pci.ko
[   33.360406] TRACE: /bin/tpmr(233): tpm2_extend
[   33.457690] TRACE: /bin/tpmr(249): tpm2_extend
[   33.544866] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/xhci-pci.ko
[   33.845970] sha256: 5 : 0x4BB1E1405AD1FA13B66FE9BB465B0DB0F18CA317B9802CE40D42589ACE26BF0E
[   33.891269] TRACE: /bin/tpmr(262): tpm2_extend
[   33.980100] DEBUG: TPM: Extended PCR[5] with hash 7a3d34fe568abab53b827ff77d4c51f21a7057111c8afcc4c91e775f92ed3488
[   34.062763] DEBUG: Loading /lib/modules/xhci-pci.ko with busybox insmod
[   34.128794] xhci_hcd 0000:00:04.0: xHCI Host Controller
[   34.133872] xhci_hcd 0000:00:04.0: new USB bus registered, assigned bus number 5
[   34.151016] xhci_hcd 0000:00:04.0: hcc params 0x00087001 hci version 0x100 quirks 0x0000000000000010
[   34.161911] xhci_hcd 0000:00:04.0: xHCI Host Controller
[   34.183035] xhci_hcd 0000:00:04.0: new USB bus registered, assigned bus number 6
[   34.186612] xhci_hcd 0000:00:04.0: Host supports USB 3.0 SuperSpeed
[   34.200780] hub 5-0:1.0: USB hub found
[   34.206303] hub 5-0:1.0: 4 ports detected
[   34.219557] usb usb6: We don't know the algorithms for LPM for this host, disabling LPM.
[   34.227864] hub 6-0:1.0: USB hub found
[   34.231766] hub 6-0:1.0: 4 ports detected
[   34.493218] usb 5-1: new high-speed USB device number 2 using xhci_hcd
[   34.801054] usb 6-2: new SuperSpeed USB device number 2 using xhci_hcd
[   34.967786] usb 5-3: new full-speed USB device number 3 using xhci_hcd
[   36.315200] TRACE: /etc/functions(646): enable_usb_storage
[   36.497680] TRACE: /sbin/insmod(9): main
[   36.635077] TPM: Extending PCR[5] with /lib/modules/usb-storage.ko and parameters '' before loading
[   36.650164] TRACE: /sbin/insmod(53): main
[   36.683880] No module parameters, extending only with the module's content
[   36.838984] TRACE: /bin/tpmr(847): main
[   36.881693] TPM: Extending PCR[5] with /lib/modules/usb-storage.ko
[   36.922295] TRACE: /bin/tpmr(233): tpm2_extend
[   36.983648] TRACE: /bin/tpmr(249): tpm2_extend
[   37.050923] DEBUG: TPM: Will extend PCR[5] with hash of file content /lib/modules/usb-storage.ko
[   37.232473] sha256: 5 : 0x7F34911761A0F0E7FF50E024F3840B0A2F95B7103E07FAACD3E70054BBD68CB6
[   37.293054] TRACE: /bin/tpmr(262): tpm2_extend
[   37.356708] DEBUG: TPM: Extended PCR[5] with hash 17f654dd3940e8d163effb16581830ee2eee7ea0bd9229c669a7533e324fc07d
[   37.411764] DEBUG: Loading /lib/modules/usb-storage.ko with busybox insmod
[   37.457897] usb-storage 6-2:1.0: USB Mass Storage device detected
[   37.464556] scsi host6: usb-storage 6-2:1.0
[   37.468555] usbcore: registered new interface driver usb-storage
[   37.572047] TRACE: /etc/functions(683): list_usb_storage
[   37.661606] DEBUG: Listing USB storage devices (including partitions)
[   38.490984] scsi 6:0:0:0: Direct-Access     QEMU     QEMU HARDDISK    2.5+ PQ: 0 ANSI: 5
[   38.502909] sd 6:0:0:0: Power-on or device reset occurred
[   38.514609] sd 6:0:0:0: Attached scsi generic sg1 type 0
[   38.555756] sd 6:0:0:0: [sda] 524288 512-byte logical blocks: (268 MB/256 MiB)
[   38.566309] sd 6:0:0:0: [sda] Write Protect is off
[   38.573779] sd 6:0:0:0: [sda] Mode Sense: 63 00 00 08
[   38.586771] sd 6:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[   38.598505]  sda: sda1 sda2
[   38.603037] sd 6:0:0:0: [sda] Attached SCSI disk
[   38.844575] TRACE: /etc/functions(683): list_usb_storage
[   38.908121] DEBUG: Listing USB storage devices (including partitions)
[   39.048171] DEBUG: USB storage device of size greater then 0: /sys/block/sda
[   39.212744] DEBUG: USB storage device with partition table: /dev/sda
[   39.337729] DEBUG: Cleaning /media directory
[   39.384872] TRACE: /etc/functions(683): list_usb_storage
[   39.448795] DEBUG: Listing USB storage devices (including partitions)
[   39.628558] DEBUG: USB storage device of size greater then 0: /sys/block/sda
[   39.777960] DEBUG: USB storage device with partition table: /dev/sda
[   44.316126] DEBUG: Checking if /dev/sda1 is a LUKS device/partition
[   44.437352] DEBUG: Selected USB partition is a LUKS device
[   44.511856] DEBUG: Opening LUKS device /dev/sda1

@tlaurion tlaurion added the bug label Nov 20, 2025
@tlaurion
Copy link
Collaborator Author

tlaurion commented Dec 2, 2025

No review from @JonathonHall-Purism nor @daringer .
Adding copilot as reviewer, point for #2027 to move forward, this is not sustainable; this is a bugfix.

@tlaurion tlaurion requested a review from Copilot December 2, 2025 20:17
Copilot AI reviewed Dec 2, 2025
View reviewed changes
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@tlaurion tlaurion requested a review from Copilot December 2, 2025 20:19
Copilot AI reviewed Dec 2, 2025
View reviewed changes
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@tlaurion
Copy link
Collaborator Author

tlaurion commented Dec 3, 2025

@copilot can you tell us why you can't review this PR when assigned as reviewer?

@tlaurion
Copy link
Collaborator Author

tlaurion commented Dec 3, 2025

Nope. More work needed to get co-pilot to review PR now. Later.

@tlaurion tlaurion changed the title bugfix : require passphrase to mount encrypted LUKS partition bugfix : require passphrase to auto mount encrypted LUKS partition on thumb drive Jan 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@daringer daringer Awaiting requested review from daringer

@JonathonHall-Purism JonathonHall-Purism Awaiting requested review from JonathonHall-Purism

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

bug

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

OEM Factory Reset permits to export public key to LUKS encrypted partition but freezes

1 participant

@tlaurion