 |
Narrowed this down to /usr/lib/dracut/modules.d/60clevis-pin-tang/module-setup.sh I reverted this file. Did a dracut -f. Works. Here's the diffs: diff -r 60clevis-pin-tang/module-setup.sh /usr/lib/dracut/modules.d/60clevis-pin-tang/module-setup.sh 21,31d20 < has_devices_bound_to_tang() { < local dev < for dev in $(lsblk -p -n -s -r \ < | awk '$6 == "crypt" { getline; print $1 }' | sort -u); do < if clevis luks list -d "${dev}" 2>/dev/null | grep -q tang; then < return 0 < fi < done < return 1 < } < 33,37c22 < local deps="clevis" < if has_devices_bound_to_tang; then < deps=$(printf "%s network" "${deps}") < fi < echo "${deps}" --- > echo clevis network 41,42c26,34 < cmdline() { < echo "rd.neednet=1" --- > have_tang_bindings() { > . clevis-luks-common-functions > local dev > for dev in $(clevis_devices_to_unlock "list-open-devices"); do > if clevis luks list -d "${dev}" | grep -q tang; then > return 0 > fi > done > return 1 46,47c38,39 < if has_devices_bound_to_tang; then < cmdline > "${initdir}/etc/cmdline.d/99clevis-pin-tang.conf" --- > if [ "${hostonly_cmdline}" = "yes" ] && have_tang_bindings; then > echo "rd.neednet=1" > "${initdir}/etc/cmdline.d/99clevis-pin-tang.conf" |
|
|
It's this line: if clevis luks list -d "${dev}" | grep -q tang; then The problem is, grep -q terminates as soon as it has a match, the pipe is closed, but the clevis balks because of it, and actually exists with exit code 141. Suggestion: clevis luks list -d "${dev}" | grep -q tang if [ "${PIPESTATUS[1]}" -eq 0 ]; then |
- Anonymous
