Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clevis update on centos stream 9 results in boot failure #1630

Open
Prashanth684 opened this issue Oct 7, 2024 · 2 comments
Open

Clevis update on centos stream 9 results in boot failure #1630

Prashanth684 opened this issue Oct 7, 2024 · 2 comments

Comments

@Prashanth684
Copy link
Contributor

A recent upgrade to the Clevis package from clevis-20-200.el9 to clevis-21-201.el9 pulls in the opensc and pcsc-lite packages, causing this error:

[    1.931395] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.742582] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.933525] dracut-initqueue[621]: Usage: pcscd options
[    1.933837] dracut-initqueue[621]: Options:
[[0;32m  OK  [[    1.934124] dracut-initqueue[621]:   -a, --apdu		log APDU commands and results
0m] Found device [0;1;39mAmazon Elastic Block Store root[0m.[    1.934449] dracut-initqueue[621]:   -c, --config		path to reader.conf
[    1.934737] dracut-initqueue[621]:   -f, --foreground	run in foreground (no daemon),

[    1.935028] dracut-initqueue[621]: 			send logs to stdout instead of syslog
[    1.935341] dracut-initqueue[621]:   -T, --color		force use of colored logs
[    1.935628] dracut-initqueue[621]:   -h, --help		display usage information
[    1.935912] dracut-initqueue[621]:   -H, --hotplug		ask the daemon to rescan the available readers
[[0;32m  OK  [0m] Reached target [0;1;39mInit[    1.936468] dracut-initqueue[621]:   -v, --version		display the program version number
rd Root Device[[    1.936748] dracut-initqueue[621]:   -d, --debug		display lower level debug messages
0m.
[    1.937028] dracut-initqueue[621]:   -i, --info		display info level debug messages
[    1.937316] dracut-initqueue[621]:   -e  --error		display error level debug messages (default level)
[    1.937834] dracut-initqueue[621]:   -C  --critical	display critical only level debug messages
[    1.938109] dracut-initqueue[621]:   --force-reader-polling ignore the IFD_GENERATE_HOTPLUG reader capability
[    1.938665] dracut-initqueue[621]:   -t, --max-thread	maximum number of threads (default 200)
[    1.938948] dracut-initqueue[621]:   -s, --max-card-handle-per-thread	maximum number of card handle per thread (default: 200)
[    1.939509] dracut-initqueue[621]:   -r, --max-card-handle-per-reader	maximum number of card handle per reader (default: 200)
[    1.940064] dracut-initqueue[621]:   -x, --auto-exit	pcscd will quit after 60 seconds of inactivity
[    1.940632] dracut-initqueue[621]:   -S, --reader-name-no-serial    do not include the USB serial number in the name

https://issues.redhat.com/browse/RHEL-61612 has been filed and a potential fix has been filed: latchset/clevis#491

Prashanth684 added a commit to Prashanth684/os that referenced this issue Oct 7, 2024
Latest clevis pulls in opensc and pcsc-lite which gives this error on
booting:

```
[    1.931395] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.742582] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.933525] dracut-initqueue[621]: Usage: pcscd options
[    1.933837] dracut-initqueue[621]: Options:
[[0;32m  OK  [[    1.934124] dracut-initqueue[621]:   -a, --apdu		log APDU commands and results
0m] Found device [0;1;39mAmazon Elastic Block Store root[0m.[    1.934449] dracut-initqueue[621]:   -c, --config		path to reader.conf
[    1.934737] dracut-initqueue[621]:   -f, --foreground	run in foreground (no daemon),

[    1.935028] dracut-initqueue[621]: 			send logs to stdout instead of syslog
[    1.935341] dracut-initqueue[621]:   -T, --color		force use of colored logs
[    1.935628] dracut-initqueue[621]:   -h, --help		display usage information
[    1.935912] dracut-initqueue[621]:   -H, --hotplug		ask the daemon to rescan the available readers
[[0;32m  OK  [0m] Reached target [0;1;39mInit[    1.936468] dracut-initqueue[621]:   -v, --version		display the program version number
rd Root Device[[    1.936748] dracut-initqueue[621]:   -d, --debug		display lower level debug messages
0m.
[    1.937028] dracut-initqueue[621]:   -i, --info		display info level debug messages
[    1.937316] dracut-initqueue[621]:   -e  --error		display error level debug messages (default level)
[    1.937834] dracut-initqueue[621]:   -C  --critical	display critical only level debug messages
[    1.938109] dracut-initqueue[621]:   --force-reader-polling ignore the IFD_GENERATE_HOTPLUG reader capability
[    1.938665] dracut-initqueue[621]:   -t, --max-thread	maximum number of threads (default 200)
[    1.938948] dracut-initqueue[621]:   -s, --max-card-handle-per-thread	maximum number of card handle per thread (default: 200)
[    1.939509] dracut-initqueue[621]:   -r, --max-card-handle-per-reader	maximum number of card handle per reader (default: 200)
[    1.940064] dracut-initqueue[621]:   -x, --auto-exit	pcscd will quit after 60 seconds of inactivity
[    1.940632] dracut-initqueue[621]:   -S, --reader-name-no-serial    do not include the USB serial number in the name
```
This addresses openshift#1630 until https://issues.redhat.com/browse/RHEL-61612 has been fixed.
Prashanth684 added a commit to Prashanth684/os that referenced this issue Oct 8, 2024
Latest clevis pulls in opensc and pcsc-lite which gives this error on
booting:

```
[    1.931395] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.742582] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.933525] dracut-initqueue[621]: Usage: pcscd options
[    1.933837] dracut-initqueue[621]: Options:
[[0;32m  OK  [[    1.934124] dracut-initqueue[621]:   -a, --apdu		log APDU commands and results
0m] Found device [0;1;39mAmazon Elastic Block Store root[0m.[    1.934449] dracut-initqueue[621]:   -c, --config		path to reader.conf
[    1.934737] dracut-initqueue[621]:   -f, --foreground	run in foreground (no daemon),

[    1.935028] dracut-initqueue[621]: 			send logs to stdout instead of syslog
[    1.935341] dracut-initqueue[621]:   -T, --color		force use of colored logs
[    1.935628] dracut-initqueue[621]:   -h, --help		display usage information
[    1.935912] dracut-initqueue[621]:   -H, --hotplug		ask the daemon to rescan the available readers
[[0;32m  OK  [0m] Reached target [0;1;39mInit[    1.936468] dracut-initqueue[621]:   -v, --version		display the program version number
rd Root Device[[    1.936748] dracut-initqueue[621]:   -d, --debug		display lower level debug messages
0m.
[    1.937028] dracut-initqueue[621]:   -i, --info		display info level debug messages
[    1.937316] dracut-initqueue[621]:   -e  --error		display error level debug messages (default level)
[    1.937834] dracut-initqueue[621]:   -C  --critical	display critical only level debug messages
[    1.938109] dracut-initqueue[621]:   --force-reader-polling ignore the IFD_GENERATE_HOTPLUG reader capability
[    1.938665] dracut-initqueue[621]:   -t, --max-thread	maximum number of threads (default 200)
[    1.938948] dracut-initqueue[621]:   -s, --max-card-handle-per-thread	maximum number of card handle per thread (default: 200)
[    1.939509] dracut-initqueue[621]:   -r, --max-card-handle-per-reader	maximum number of card handle per reader (default: 200)
[    1.940064] dracut-initqueue[621]:   -x, --auto-exit	pcscd will quit after 60 seconds of inactivity
[    1.940632] dracut-initqueue[621]:   -S, --reader-name-no-serial    do not include the USB serial number in the name
```
This addresses openshift#1630 until https://issues.redhat.com/browse/RHEL-61612 has been fixed.
jbtrystram pushed a commit to jbtrystram/openshift-os that referenced this issue Oct 9, 2024
Latest clevis pulls in opensc and pcsc-lite which gives this error on
booting:

```
[    1.931395] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.742582] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.933525] dracut-initqueue[621]: Usage: pcscd options
[    1.933837] dracut-initqueue[621]: Options:
[[0;32m  OK  [[    1.934124] dracut-initqueue[621]:   -a, --apdu		log APDU commands and results
0m] Found device [0;1;39mAmazon Elastic Block Store root[0m.[    1.934449] dracut-initqueue[621]:   -c, --config		path to reader.conf
[    1.934737] dracut-initqueue[621]:   -f, --foreground	run in foreground (no daemon),

[    1.935028] dracut-initqueue[621]: 			send logs to stdout instead of syslog
[    1.935341] dracut-initqueue[621]:   -T, --color		force use of colored logs
[    1.935628] dracut-initqueue[621]:   -h, --help		display usage information
[    1.935912] dracut-initqueue[621]:   -H, --hotplug		ask the daemon to rescan the available readers
[[0;32m  OK  [0m] Reached target [0;1;39mInit[    1.936468] dracut-initqueue[621]:   -v, --version		display the program version number
rd Root Device[[    1.936748] dracut-initqueue[621]:   -d, --debug		display lower level debug messages
0m.
[    1.937028] dracut-initqueue[621]:   -i, --info		display info level debug messages
[    1.937316] dracut-initqueue[621]:   -e  --error		display error level debug messages (default level)
[    1.937834] dracut-initqueue[621]:   -C  --critical	display critical only level debug messages
[    1.938109] dracut-initqueue[621]:   --force-reader-polling ignore the IFD_GENERATE_HOTPLUG reader capability
[    1.938665] dracut-initqueue[621]:   -t, --max-thread	maximum number of threads (default 200)
[    1.938948] dracut-initqueue[621]:   -s, --max-card-handle-per-thread	maximum number of card handle per thread (default: 200)
[    1.939509] dracut-initqueue[621]:   -r, --max-card-handle-per-reader	maximum number of card handle per reader (default: 200)
[    1.940064] dracut-initqueue[621]:   -x, --auto-exit	pcscd will quit after 60 seconds of inactivity
[    1.940632] dracut-initqueue[621]:   -S, --reader-name-no-serial    do not include the USB serial number in the name
```
This addresses openshift#1630 until https://issues.redhat.com/browse/RHEL-61612 has been fixed.
Prashanth684 added a commit to Prashanth684/os that referenced this issue Oct 9, 2024
Latest clevis pulls in opensc and pcsc-lite which gives this error on
booting:

```
[    1.931395] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.742582] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.933525] dracut-initqueue[621]: Usage: pcscd options
[    1.933837] dracut-initqueue[621]: Options:
[[0;32m  OK  [[    1.934124] dracut-initqueue[621]:   -a, --apdu		log APDU commands and results
0m] Found device [0;1;39mAmazon Elastic Block Store root[0m.[    1.934449] dracut-initqueue[621]:   -c, --config		path to reader.conf
[    1.934737] dracut-initqueue[621]:   -f, --foreground	run in foreground (no daemon),

[    1.935028] dracut-initqueue[621]: 			send logs to stdout instead of syslog
[    1.935341] dracut-initqueue[621]:   -T, --color		force use of colored logs
[    1.935628] dracut-initqueue[621]:   -h, --help		display usage information
[    1.935912] dracut-initqueue[621]:   -H, --hotplug		ask the daemon to rescan the available readers
[[0;32m  OK  [0m] Reached target [0;1;39mInit[    1.936468] dracut-initqueue[621]:   -v, --version		display the program version number
rd Root Device[[    1.936748] dracut-initqueue[621]:   -d, --debug		display lower level debug messages
0m.
[    1.937028] dracut-initqueue[621]:   -i, --info		display info level debug messages
[    1.937316] dracut-initqueue[621]:   -e  --error		display error level debug messages (default level)
[    1.937834] dracut-initqueue[621]:   -C  --critical	display critical only level debug messages
[    1.938109] dracut-initqueue[621]:   --force-reader-polling ignore the IFD_GENERATE_HOTPLUG reader capability
[    1.938665] dracut-initqueue[621]:   -t, --max-thread	maximum number of threads (default 200)
[    1.938948] dracut-initqueue[621]:   -s, --max-card-handle-per-thread	maximum number of card handle per thread (default: 200)
[    1.939509] dracut-initqueue[621]:   -r, --max-card-handle-per-reader	maximum number of card handle per reader (default: 200)
[    1.940064] dracut-initqueue[621]:   -x, --auto-exit	pcscd will quit after 60 seconds of inactivity
[    1.940632] dracut-initqueue[621]:   -S, --reader-name-no-serial    do not include the USB serial number in the name
```
This addresses openshift#1630 until https://issues.redhat.com/browse/RHEL-61612 has been fixed.
jbtrystram pushed a commit to jbtrystram/openshift-os that referenced this issue Oct 11, 2024
Latest clevis pulls in opensc and pcsc-lite which gives this error on
booting:

```
[    1.931395] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.742582] dracut-initqueue[621]: pcscd: unrecognized option '--disable-polkit'
[    1.933525] dracut-initqueue[621]: Usage: pcscd options
[    1.933837] dracut-initqueue[621]: Options:
[[0;32m  OK  [[    1.934124] dracut-initqueue[621]:   -a, --apdu		log APDU commands and results
0m] Found device [0;1;39mAmazon Elastic Block Store root[0m.[    1.934449] dracut-initqueue[621]:   -c, --config		path to reader.conf
[    1.934737] dracut-initqueue[621]:   -f, --foreground	run in foreground (no daemon),

[    1.935028] dracut-initqueue[621]: 			send logs to stdout instead of syslog
[    1.935341] dracut-initqueue[621]:   -T, --color		force use of colored logs
[    1.935628] dracut-initqueue[621]:   -h, --help		display usage information
[    1.935912] dracut-initqueue[621]:   -H, --hotplug		ask the daemon to rescan the available readers
[[0;32m  OK  [0m] Reached target [0;1;39mInit[    1.936468] dracut-initqueue[621]:   -v, --version		display the program version number
rd Root Device[[    1.936748] dracut-initqueue[621]:   -d, --debug		display lower level debug messages
0m.
[    1.937028] dracut-initqueue[621]:   -i, --info		display info level debug messages
[    1.937316] dracut-initqueue[621]:   -e  --error		display error level debug messages (default level)
[    1.937834] dracut-initqueue[621]:   -C  --critical	display critical only level debug messages
[    1.938109] dracut-initqueue[621]:   --force-reader-polling ignore the IFD_GENERATE_HOTPLUG reader capability
[    1.938665] dracut-initqueue[621]:   -t, --max-thread	maximum number of threads (default 200)
[    1.938948] dracut-initqueue[621]:   -s, --max-card-handle-per-thread	maximum number of card handle per thread (default: 200)
[    1.939509] dracut-initqueue[621]:   -r, --max-card-handle-per-reader	maximum number of card handle per reader (default: 200)
[    1.940064] dracut-initqueue[621]:   -x, --auto-exit	pcscd will quit after 60 seconds of inactivity
[    1.940632] dracut-initqueue[621]:   -S, --reader-name-no-serial    do not include the USB serial number in the name
```
This addresses openshift#1630 until https://issues.redhat.com/browse/RHEL-61612 has been fixed.
@jlebon
Copy link
Member

jlebon commented Oct 30, 2024

See also https://src.fedoraproject.org/rpms/clevis/pull-request/33. @sergio-correia @sarroutbi Should the same change be done in c9s/RHEL?

@sarroutbi
Copy link
Member

sarroutbi commented Oct 30, 2024

Hello. Change is available in clevis-21-203.el9

Waiting for QA to verify appropriate Errata. Errata can be found in JIRA issue referred above

Prashanth684 added a commit to Prashanth684/os that referenced this issue Dec 6, 2024
Due to openshift#1630, we had to pin clevis
to an older version. This was fixed in clevis-21-203.el9, so removing
this
openshift-cherrypick-robot pushed a commit to openshift-cherrypick-robot/os that referenced this issue Dec 9, 2024
Due to openshift#1630, we had to pin clevis
to an older version. This was fixed in clevis-21-203.el9, so removing
this
openshift-cherrypick-robot pushed a commit to openshift-cherrypick-robot/os that referenced this issue Dec 9, 2024
Due to openshift#1630, we had to pin clevis
to an older version. This was fixed in clevis-21-203.el9, so removing
this
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants