Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 571577
Summary: | Unable to decrypt disk on F-12 x86_64 install on T410: required "rdblacklist=aesni-intel" | ||||||
---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Dave Malcolm <dmalcolm> | ||||
Component: | kernel | Assignee: | Kernel Maintainer List <kernel-maint> | ||||
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
Severity: | medium | Docs Contact: | |||||
Priority: | low | ||||||
Version: | 12 | CC: | anton, dougsland, dwmw2, evan, gansalmon, itamar, jonathan, kernel-maint, kmcmartin, lmacken | ||||
Target Milestone: | --- | Keywords: | Reopened | ||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | kernel-2.6.32.16-150.fc12 | Doc Type: | Bug Fix | ||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | |||||||
: | 586916 589390 (view as bug list) | Environment: | |||||
Last Closed: | 2010-08-03 00:58:59 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Bug Depends On: | |||||||
Bug Blocks: | 589390 | ||||||
Attachments: |
|
Description
Dave Malcolm
2010-03-08 21:32:22 UTC
Created attachment 398629 [details]
Photo of the boot failure
The problem is still present with the latest F12 kernel update; on this hardware I still need to use "rdblacklist=aesni-intel" to boot successfully (with encrypted partitions as per defaults), or the boot fails with (apparently) the same errors as in comment #0. This is with: kernel-2.6.32.9-67.fc12.x86_64 Can you get to a shell after boot fails and see what is in /proc/crypto? Dave, So this error occurs regardless of install or not? (IE: blacklisted on install, then unblacklist and it will fail) I'm looking into it now, it's a very strange error in a mess of code... If it happens outside of the installer it will be easier for me to test it. regards, Kyle kernel-2.6.33.3-79.fc13 has been submitted as an update for Fedora 13. http://admin.fedoraproject.org/updates/kernel-2.6.33.3-79.fc13 kernel-2.6.33.3-79.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report. I had my wireless AP set to use AES for encryption, and after upgrading to kernel-2.6.33.3-79.fc13 I have no longer been able to connect to my wireless network. Now that I see this change I can probably just change the encryption settings on my AP (once I get home later today), but this might have broken things for other users who aren't able to control the cipher used by access points they use. No. That's a different bug and unrelated to this. You still have AES support, this just removes the ability to use the Core i7 AES instructions to accelerate it. --Kyle Was this also happening on F-13? The bug was reported against F-12 and that is still not fixed, but a patch went into F-13... Could this be happening because we have CONFIG_CRYPTO_FIPS=y set in our .config? That will disable any crypto drivers that fail testing, and we are seeing messages that no tests exist for that driver. This patch added NULL tests for those algorithms (?): http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff_plain;h=863b557a88f8c033f7419fabafef4712a5055f85 Added patch from comment #10 to 2.6.32.16-144 Reported fixed via IRC. Also added a fix from F-13 in 2.6.32.16-145 for the async crypto testing error messages. kernel-2.6.32.16-150.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/kernel-2.6.32.16-150.fc12 kernel-2.6.32.16-150.fc12 has been pushed to the Fedora 12 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update kernel'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/kernel-2.6.32.16-150.fc12 kernel-2.6.32.16-150.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report. |