Your message dated Mon, 11 Jul 2022 17:04:00 +0200
with message-id <5839313.lOV4Wx5bFT@bagend>
and subject line Re: Bug#1013096: Acknowledgement (linux-image-5.10.0-15-amd64:
racoon reports AES missing)
has caused the Debian Bug report #1013096,
regarding linux-image-5.10.0-15-amd64: racoon reports AES missing
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1013096: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1013096
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: linux-image-5.10.0-15-amd64
Version: 5.10.120-1
Severity: important
Hi
When i rebooted after upgrading to this kernel, setkey issued a ton of
complaints a la
Jun 16 22:58:01 brain setkey[312]: The result of line 10: No such process.
Jun 16 22:58:01 brain setkey[312]: The result of line 11: No such process.
Jun 16 22:58:01 brain setkey[312]: The result of line 19: No such process.
and racoon failed with
Jun 16 22:58:02 brain racoon: ERROR: Must get supported algorithms list first.
Jun 16 22:58:02 brain racoon: ERROR: /etc/racoon/racoon.conf:51: ";" algorithm
AES not supported by the
kernel (missing module?)
Jun 16 22:58:02 brain racoon: ERROR: fatal parse failure (1 errors)
The only difference to my untrained eye between the kernel log messages
but the new kernel and the old (-13-amd64) is messages like this that
get logged by the old kernel:
Jun 16 23:14:21 brain kernel: [ 24.062688] AVX or AES-NI instructions are not
detected.
Jun 16 23:14:21 brain kernel: [ 24.097466] AVX or AES-NI instructions are not
detected.
Yes, I have older hardware, setkey and racoon are from old, obsolete
packages, etc., but just logging this in case it's an actual problem
with the kernel and not either of those old packages (mostly so any
folks seeing the same thing knows they are not alone).
This seems like a possibly related "upstream" bug report:
https://lore.kernel.org/stable/20220613143034.wbz7kqmijc5b5...@intra2net.com/
but it's for the 4.19 kernel series. This seems to be the same fix for
the 5.10 series:
https://lore.kernel.org/stable/20220613094921.659363...@linuxfoundation.org/
which seems to be queued for the 5.10.122 release, but it doesn't point
to anything which seems to line up with my observation about the difference
in kernel log messages on my system about missing AVS or AES-NI instructions
[shrug]
Anyways, thanks to the debian-kernel team for all your work, whether
this leads to any more of it or (likely) not.
--buck
-- System Information:
Debian Release: 11.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.10.0-13-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US, LC_CTYPE=en_US.utf8 (charmap=UTF-8) (ignored: LC_ALL set to
en_US.utf8), LANGUAGE not set
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages linux-image-5.10.0-15-amd64 depends on:
ii initramfs-tools [linux-initramfs-tool] 0.140
ii kmod 28-1
ii linux-base 4.6
Versions of packages linux-image-5.10.0-15-amd64 recommends:
ii apparmor 2.13.6-10
ii firmware-linux-free 20200122-1
Versions of packages linux-image-5.10.0-15-amd64 suggests:
pn debian-kernel-handbook <none>
ii grub-pc 2.04-20
pn linux-doc-5.10 <none>
--- End Message ---
--- Begin Message ---
Version: linux/5.10.127-1
On Monday, 11 July 2022 14:38:17 CEST Buck Huppmann wrote:
> This can be closed (please).
>
> As expected, as of upgrading to
> linux-image-5.10.0-16-amd64 (= 5.10.127-1)
> racoon/setkey are fine again
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
