[systemd-devel] Systemd askpassword

[Zbigniew Jędrzejewski-Szmek]

On Sat, Apr 12, 2014 at 10:08:27PM +0200, Ismael Bouya wrote:
> Hi,
> I'm facing a problem with systemd and his "askpassword" feature:
> 
> I want to add a luks partition, so I need to ask for the password at some
> time. However, I don't want to ask for it during the boot sequence, so I
> added the "nofail" flag and didn't put any timeout. 
> 
> Everything goes well, I can start and call the
> systemd-tty-ask-password-agent whenever I want to have access to the
> encrypted media. However... if I don't call that, then at shutdown the
> computer hangs forever with a black screen seemingly waiting for something
> (I had to try a few restarts to find out that the hanging comes from here).
Sounds like a bug. Can you enable verbose logs and post the messages from
a failed shutdown? It should be enough to 'systemd-analyze set-log-level debug',
and then reboot, wait a few minutes and reset, and extract the logs using
'journalctl -b-1'.

> What did I miss in the configuration? It also happen if you put a
> non-infinite timeout, but then the hanging finished at the
> timeout. Basically that means that the "nofail" flag in crypttab cannot be
> used reliably.
> 
> Thanks in advance for your help!
> 
> (Side question: Is there a way to say that systemd-tty-ask-password-agent
> can be run by the user and not only by root to mount the disk? If he know
> the disk password then he's most probably allowed to mount it...)
No, but this sounds like a useful feature.

Zbyszek