Skip to content

nixos/system/boot/luksroot.nix: cryptsetup-askpass never exits #413165

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
3 tasks done
blackxored opened this issue Jun 2, 2025 · 1 comment
Open
3 tasks done

nixos/system/boot/luksroot.nix: cryptsetup-askpass never exits #413165

blackxored opened this issue Jun 2, 2025 · 1 comment
Assignees
Labels
0.kind: bug Something is broken 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS

Comments

@blackxored
Copy link

blackxored commented Jun 2, 2025

Nixpkgs version

  • Stable (25.05)

Describe the bug

Since a few months, this script is not correctly exiting or triggering a state that it did before where you could unlock remotely. The unlock still goes through, but it hangs like this:

Passphrase for /dev/disk/by-partlabel/disk-one-luks: 
Waiting 10 seconds for LUKS to request a passphrase.........

I believe this is because of the change that was made that emits "Exiting shell".

Steps to reproduce

Have boot.initrd.network.ssh enabled with either shell = "/bin/cryptsetup-askpass" or a postCommand that appends to cryptsetup-askpass to /root.profile.

Run:

  1. echo -n "<passphrase>" | ssh <host> - errors out, does not unlock disk, it used to
  2. echo "<passphrase>" | ssh <host> - does unlock disk, but command never exits

Expected behaviour

I would expect the disk to be unlocked with the correct passphrase and the remote command to exit after 10 secs

Screenshots

No response

Relevant log output

Additional context

No response

System metadata

  • system: "x86_64-linux"
  • host os: Linux 6.12.30, NixOS, 25.11 (Xantusia), 25.11.20250528.96ec055
  • multi-user?: yes
  • sandbox: yes
  • version: nix-env (Nix) 2.28.3
  • nixpkgs: /nix/store/2q205l7a46885nq31vvji40m30bygzzj-source

Notify maintainers

Not sure where to find maintainers, pinging last 3 committers @hugolgst, @rnhmjoj, @ck3d.


Note for maintainers: Please tag this issue in your pull request description. (i.e. Resolves #ISSUE.)

I assert that this issue is relevant for Nixpkgs

Is this issue important to you?

Add a 👍 reaction to issues you find important.

@blackxored blackxored added 0.kind: bug Something is broken 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS labels Jun 2, 2025
@rnhmjoj
Copy link
Contributor

rnhmjoj commented Jun 2, 2025

The change you mention is this commit: 47177c0. You could try reverting.
I have a machine with remote unlock, I'll test this soon when I update it to 25.05.

@rnhmjoj rnhmjoj self-assigned this Jun 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
0.kind: bug Something is broken 6.topic: nixos Issues or PRs affecting NixOS modules, or package usability issues specific to NixOS
Projects
None yet
Development

No branches or pull requests

2 participants