Azure / Azure/azure-linux-extensions
AzureDiskEncryptionForLinux Fails when nfs-client.target is enabled
- Dominant language
- Python
- Stars
- 333
- Forks
- 278
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 4
Description
Encrypting Centos 7.7.1908 VM osdisk fails with error:
Failed to unmount /oldroot.
The problem is that /var/lib/nfs/rpc_pipefs remains mounted and is not unmounted when pivot_root is done. nfs-client.target is responsible for mounting rpc_pipefs and I believe this service (or any of the dependent services) was not intentionally enabled before running the encryption process. Disabling the nfs-client.target unit and restarting fixes the problem.
/var/lib/nfs/rpc_pipefs should be unmounted when doing pivot_root in order finish osdisk encryption process.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing the AzureDiskEncryptionForLinux flow that performs pivot_root and inspect how mounted filesystems are handled. Reproduce the failure on CentOS 7.7.1908 with nfs-client.target enabled, then verify that /var/lib/nfs/rpc_pipefs is unmounted and OS disk encryption completes successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, centos, linux, python
- Domain
- cloud, operating-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100