Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1495635
Summary: | systemd times out when waiting to unlock disks, falling to dracut shell | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Kamil Páral <kparal> | ||||||||
Component: | dracut | Assignee: | dracut-maint-list | ||||||||
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||||
Severity: | unspecified | Docs Contact: | |||||||||
Priority: | unspecified | ||||||||||
Version: | 27 | CC: | dracut-maint-list, fzatlouk, harald, jeischma, jfrieben, jonathan, jsynacek, kay, lnykryn, lpoetter, mschmidt, msekleta, nb, renault, robatino, ssahani, s, systemd-maint, tpopela, zbyszek | ||||||||
Target Milestone: | --- | Keywords: | CommonBugs, Reopened | ||||||||
Target Release: | --- | ||||||||||
Hardware: | Unspecified | ||||||||||
OS: | Unspecified | ||||||||||
Whiteboard: | https://fedoraproject.org/wiki/Common_F27_bugs#unlock-password-timeout AcceptedBlocker | ||||||||||
Fixed In Version: | dracut-046-4.fc27 | Doc Type: | If docs needed, set a value | ||||||||
Doc Text: | Story Points: | --- | |||||||||
Clone Of: | Environment: | ||||||||||
Last Closed: | 2017-10-13 23:30:00 UTC | Type: | Bug | ||||||||
Regression: | --- | Mount Type: | --- | ||||||||
Documentation: | --- | CRM: | |||||||||
Verified Versions: | Category: | --- | |||||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||||
Embargoed: | |||||||||||
Bug Depends On: | |||||||||||
Bug Blocks: | 1396704 | ||||||||||
Attachments: |
|
Description
Kamil Páral
2017-09-26 11:21:36 UTC
Created attachment 1331004 [details]
journal
Created attachment 1331005 [details]
rdsosreport.txt
Created attachment 1331006 [details]
rpm-qa
CC Jiri Eischmann, who reported this to me in the first place. Three (out of three) of his colleagues saw this problem after distribution upgrade and thought it's a problem connected to it. This is a conditional violation of: "A system installed without a graphical package set must boot to a working login prompt without any unintended user intervention, and all virtual consoles intended to provide a working login prompt must do so. " https://fedoraproject.org/wiki/Fedora_27_Beta_Release_Criteria#Expected_installed_system_boot_behavior Also And "In all of the above cases, if any system partitions were encrypted as part of the installation, the boot process must prompt for the passphrase(s) and correctly unlock the partition(s) when provided with the correct passphrase(s)." https://fedoraproject.org/wiki/Fedora_27_Alpha_Release_Criteria#Expected_installed_system_boot_behavior If you wait a while before decrypting disks, the system fails to fulfill the criteria. Proposing as a Final blocker, because it doesn't affect everyone and can be quite easily worked around (just reboot), if you know how. This issue can be fixed in dracut. Right now dracut generates timeout.conf drop-in for rootfs in order to prevent timeout of the start job for the device unit. Drop-in contains, [Unit] JobTimeoutSec=0 Since the introduction of "JobRunningTimeoutSec" option in systemd [1] this is not sufficient. Once start jobs for device units are queued they immediately transition to running state and hence JobRunningTimeoutSec is applied. In order to fix this, we need to generate different drop-in. I have modified dracut locally and following drop-in does the trick, [Unit] JobRunningTimeoutSec=0 The irony is that JobRunningTimeoutSec was introduced to help alleviate some issues around device unit timeouts. AFAICT, we also need DefaultJobRunningTimeoutSec in order for this to be actually useful. Users wouldn't need to generate device drop-ins or add x-systemd.device-timeout=0 on fstab entries because they could just set default timeout applied *only* to device units since JobTimeoutSec=0 (infinity) for all other units. [1] https://github.com/systemd/systemd/commit/a2df3ea4ae058693bc7bf203d144e8af3c9493d2 Fix proposed upstream, https://github.com/dracutdevs/dracut/pull/288 *** This bug has been marked as a duplicate of bug 1491847 *** *** Bug 1491847 has been marked as a duplicate of this bug. *** Discussed at blocker review meeting [1]: AcceptedBlocker (Final) - This violates boot-related criteria when the system is encrypted and is not unlocked quickly enough. [1] https://meetbot-raw.fedoraproject.org/fedora-blocker-review/2017-10-02/ This is also independently fixed in systemd 235. If an update with 235 is submitted for F27, this will be another solution, and if not, the patch can always be backported. dracut-046-3.1.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-a986f116b0 dracut-046-4.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7109f3f6c dracut-046-4.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7109f3f6c (In reply to Fedora Update System from comment #13) > dracut-046-4.fc27 has been submitted as an update to Fedora 27. > https://bodhi.fedoraproject.org/updates/FEDORA-2017-f7109f3f6c Verified fixed. dracut-046-4.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report. |