https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-15407 Lustre <p>With Ubuntu LTS running a 5.8 kernel which has native fscrypt support I added in sanity-sec testing. This is using the default embedded llcrypt and it failed the fscrypt test. For sanity-sec 46 I get:</p> <p>== sanity-sec test 46: encrypted file access semantics without key ========================================================== 07:46:51 (1641221211) <br/> 10.0.0.10@tcp:/lustre /mnt/lustre lustre rw,checksum,flock,user_xattr,lruresize,lazystatfs,nouser_fid2path,verbose,encrypt 0 0 <br/> Stopping client samuel /mnt/lustre (opts<img class="emoticon" src="https://jira.whamcloud.com/images/icons/emoticons/smile.png" height="16" width="16" align="absmiddle" alt="" border="0"/> <br/> Starting client: samuel:  -o user_xattr,flock,test_dummy_encryption 10.0.0.10@tcp:/lustre /mnt/lustre <br/> mount.lustre: test dummy encryption option ignored: could not insert dummy encryption key into session keyring <br/> Unable to dump key: Key has been revoked <br/> Format:</p> <p>All the fscrypt test fail the same way.</p> Ubuntu 20 HWE client running a 5.8 kernel. LU-15407

fscrypt does not work on Ubuntu 5.8 kernel

Bug Critical Resolved Fixed Sebastien Buisson James A Simmons Mon, 3 Jan 2022 14:53:50 +0000 Mon, 21 Mar 2022 18:48:33 +0000 Tue, 18 Jan 2022 14:03:27 +0000 Lustre 2.15.0 Lustre 2.15.0 0 5 <p>Seb</p> <p>Could you please investigate?</p> <p>Thanks</p> <p>Peter</p> <p>Hi James,</p> <p>I tried but did not manage to reproduce. Here is my configuration:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre># lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04.3 LTS Release: 20.04 Codename: focal # uname -r 5.8.0-63-generic </pre> </div></div> <p>And like you, I am using the embedded <tt>llcrypt</tt> lib instead of the in-kernel fscrypt.</p> <p>When mounting with <tt>test_dummy_encryption</tt> option, it works and the <tt>fscrypt</tt> key is added to the session keyring:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre># keyctl show Session Keyring 499722460 --alswrv 0 0 keyring: _ses 302746999 --alswrv 0 65534 \_ keyring: _uid.0 70358189 --alsw-v 0 0 \_ logon: fscrypt:4242424242424242 </pre> </div></div> <p>The error message <tt>could not insert dummy encryption key into session keyring</tt> you get is displayed when the call to <tt>add_key</tt> fails. This function is provided by <tt>libkeyutils</tt>, in my case it is:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre>libkeyutils1/focal,now 1.6-6ubuntu1 amd64 [installed,automatic] </pre> </div></div> <p>I figured out its due to one of the sanity-sec test failing. Currently if any of the test fail the later test also will fail with the above error. My thinking is that the sanity-sec test are not properly revoking the key on failing testing. </p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/46038" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/46038</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-15407" title="fscrypt does not work on Ubuntu 5.8 kernel" class="issue-link" data-issue-key="LU-15407"><del>LU-15407</del></a> test: remove dummy enc key at cleanup<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: b05a9eb3e2fbe4110c66c12447af971577faa46c</p> <p>"Oleg Drokin &lt;green@whamcloud.com&gt;" merged in patch <a href="https://review.whamcloud.com/46038/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/46038/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-15407" title="fscrypt does not work on Ubuntu 5.8 kernel" class="issue-link" data-issue-key="LU-15407"><del>LU-15407</del></a> test: remove dummy enc key at cleanup<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: ec0b308614a2bad18a7a1fd805f36eb8ed6ea5eb</p> <p>Landed for 2.15</p> Related LU-13717 LU-13783 Development Rank 1|i02djb: Rank (Obsolete) 9223372036854775807 Severity