[Bug 908387] Re: Module aesni_intel not being loaded before mounting LVM2 stacked on LUKS

[Devin Lane]

I've been searching for this issue off and on for a couple years,
presumably using the wrong search terms as I only just now found this
bug posting. Applying the temporary fix from #2 worked fine for me and I
now see correct crypto SSD speeds.

Is there a reason this hasn't been fixed? Its astonishing that such a
critical bug with an easy workaround hasn't been fixed in over two
years. All this does is make Ubuntu look slow on modern hardware. Best
of all, it's very difficult to determine that this is the source of the
problem, as all the config looks correct, the correct modules are
installed, and there's no tool that tells you what crypto backend is
actually being used.

Please patch this once and for all.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cryptsetup in Ubuntu.
https://bugs.launchpad.net/bugs/908387

Title:
  Module aesni_intel not being loaded before mounting LVM2 stacked on
  LUKS

Status in cryptsetup package in Ubuntu:
  Confirmed

Bug description:
  Hi,
  I've made an installation of Ubuntu 11.10 on a system with AES-NI instructions only to find that the aesni_intel module is not being loaded before mounting the root file system, leaving the system with software encryption instead of using the hardware capabilities.

  The problem I think it's due to the modules not existing on the
  initramfs. Naturally, aes_x86_64 and cryptd modules aren't loaded too.

  Having the kernel compiled with options
  CONFIG_CRYPTO_AES=y
  CONFIG_CRYPTO_AES_X86_64=y
  CONFIG_CRYPTO_AES_NI_INTEL=y

  instead of

  CONFIG_CRYPTO_AES=y
  CONFIG_CRYPTO_AES_X86_64=m
  CONFIG_CRYPTO_AES_NI_INTEL=m

  as it appears on "config-3.0.0-14-generic" in the /boot directory
  should be OK too.

  I can manually load those modules after the system boots, but then
  it's not useful for my fully encrypted filesystem.

  ProblemType: Bug
  DistroRelease: Ubuntu 11.10
  Package: linux-image (not installed)
  ProcVersionSignature: Ubuntu 3.0.0-14.23-generic 3.0.9
  Uname: Linux 3.0.0-14-generic x86_64
  AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24.
  ApportVersion: 1.23-0ubuntu4
  Architecture: amd64
  ArecordDevices:
   **** List of CAPTURE Hardware Devices ****
   card 0: PCH [HDA Intel PCH], device 0: ALC269VB Analog [ALC269VB Analog]
     Subdevices: 1/1
     Subdevice #0: subdevice #0
  AudioDevicesInUse:
   USER        PID ACCESS COMMAND
   /dev/snd/controlC0:  raul       1706 F.... pulseaudio
  CRDA: Error: [Errno 2] No existe el archivo o el directorio
  Card0.Amixer.info:
   Card hw:0 'PCH'/'HDA Intel PCH at 0xdf000000 irq 49'
     Mixer name	: 'Intel CougarPoint HDMI'
     Components	: 'HDA:10ec0269,10431063,00100100 HDA:80862805,80860101,00100000'
     Controls      : 22
     Simple ctrls  : 12
  Date: Sat Dec 24 14:06:12 2011
  HibernationDevice: RESUME=UUID=968e95f3-010c-4925-976d-6af33e7c279b
  InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111011)
  MachineType: ASUSTeK Computer Inc. N53SN
  ProcEnviron:
   PATH=(custom, no user)
   LANG=es_ES.UTF-8
   SHELL=/bin/bash
  ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.0.0-14-generic root=/dev/mapper/ubunturoot-raiz ro quiet splash vt.handoff=7
  RelatedPackageVersions:
   linux-restricted-modules-3.0.0-14-generic N/A
   linux-backports-modules-3.0.0-14-generic  N/A
   linux-firmware                            1.60
  SourcePackage: linux
  StagingDrivers: mei
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 08/10/2011
  dmi.bios.vendor: American Megatrends Inc.
  dmi.bios.version: N53SN.208
  dmi.board.asset.tag: ATN12345678901234567
  dmi.board.name: N53SN
  dmi.board.vendor: ASUSTeK Computer Inc.
  dmi.board.version: 1.0
  dmi.chassis.asset.tag: No Asset Tag
  dmi.chassis.type: 10
  dmi.chassis.vendor: ASUSTeK Computer Inc.
  dmi.chassis.version: 1.0
  dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrN53SN.208:bd08/10/2011:svnASUSTeKComputerInc.:pnN53SN:pvr1.0:rvnASUSTeKComputerInc.:rnN53SN:rvr1.0:cvnASUSTeKComputerInc.:ct10:cvr1.0:
  dmi.product.name: N53SN
  dmi.product.version: 1.0
  dmi.sys.vendor: ASUSTeK Computer Inc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/908387/+subscriptions