Bug 1812327 - LUKS device UUID should be added to entry in /etc/crypttab
Summary: LUKS device UUID should be added to entry in /etc/crypttab
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Gluster Storage
Classification: Red Hat Storage
Component: gluster-ansible
Version: rhgs-3.5
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
: RHGS 3.5.z Batch Update 2
Assignee: Gobinda Das
QA Contact: SATHEESARAN
URL:
Whiteboard:
Depends On:
Blocks: 1812326
TreeView+ depends on / blocked
 
Reported: 2020-03-11 02:09 UTC by SATHEESARAN
Modified: 2020-06-16 05:57 UTC (History)
5 users (show)

Fixed In Version: gluster-ansible-infra-1.0.4-6.el8rhgs
Doc Type: No Doc Update
Doc Text:
Clone Of: 1812326
Environment:
rhhiv, rhel8
Last Closed: 2020-06-16 05:57:30 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github gluster gluster-ansible-infra pull 82 0 None closed NBDE and blacklist issue fixes 2020-07-09 11:20:52 UTC
Github gluster gluster-ansible pull 97 0 None closed Validate if root device is encrypted prior to actual configuration 2020-07-09 11:20:51 UTC
Red Hat Product Errata RHEA-2020:2575 0 None None None 2020-06-16 05:57:47 UTC

Description SATHEESARAN 2020-03-11 02:09:57 UTC
Description of problem:
------------------------
The ansible playbook that helps with NBDE setup, adds the disk name ( /dev/sdb ) with entry in /etc/crypttab. The disks may change during the boot and this naming convention is not persistent. ( not guaranteed to be persistent ).

/etc/crypttab entries should have UUID replaced with disk names

Version-Release number of selected component (if applicable):
-------------------------------------------------------------
gluster-ansible-infra-1.0.4-5.el8rhgs.noarch.rpm 

How reproducible:
-----------------
Always

Steps to Reproduce:
-------------------
1. Complete the NBDE setup with ansible playbook

Actual results:
----------------
/etc/crypttab contains the entry with non-persistent disk names of LUKS device

Expected results:
-----------------
/etc/crypttab should contain entry with UUID of the LUKS device

Additional info:
----------------
The following command fetches the UUID of the LUKS device:
# cryptsetup luksUUID <dev>

Example:
[root@ ~]# cryptsetup luksUUID /dev/vdb
432998f5-f94a-4c74-9254-63238af26f71

/etc/fstab entry for the same:
[root@ ~]# cat /etc/crypttab 
luks-1a44ea7b-1937-4e94-bf03-1bbe286cf7cc UUID=1a44ea7b-1937-4e94-bf03-1bbe286cf7cc none discard
luks-vdb UUID=432998f5-f94a-4c74-9254-63238af26f71

Comment 2 SATHEESARAN 2020-03-21 10:01:06 UTC
Tested with gluster-ansible-infra-1.0.4-6

After encrypting the additional disks, the crypttab entries are created with LUKS UUID of the device

Comment 6 errata-xmlrpc 2020-06-16 05:57:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2020:2575


Note You need to log in before you can comment on or make changes to this bug.