Hello,

Unlike Fedora, Debian and ubuntu kernel dump mechanism is installed on
the root filesystem and not in the initrd. So in order to be able to run
kdump, the root filesystem needs to be mounted first.

This is handled by the /scripts/local-top/cryptroot script which is
where the prompt for the passphrase happens. So the kdump-tools scripts
have no way to interact with that phase of the boot. There is no kernel
argument to the cryptroot script that would allow it to receive a
passphrase when the second kernel is booted.

Using the cryptkeyscript / cryptkey boot parameters to pass a keyfile to
open the encrypted root would create major security issue so it is not
viable.

So kexec-tools has no solution for this issue as it lies outside of its
control.

** Changed in: makedumpfile (Ubuntu)
       Status: Triaged => Won't Fix

** Changed in: makedumpfile (Ubuntu)
     Assignee: Louis Bouchard (louis-bouchard) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1366754

Title:
  kdump does not work with encrypted root partition

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/makedumpfile/+bug/1366754/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to