[GH-ISSUE #56] cryptsetup issue #30

Closed
opened 2026-05-05 04:46:39 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @webslim on GitHub (Sep 7, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/56

I've run into the following issue:

  1. open a LUKS device with cryptsetup and mount it
  2. start firejail sandbox
  3. unmount the drive
  4. run "cryptsetup luksClose $device". (outside of the sandbox)
    -> cryptsetup can't close the dm device and complains that it is still in use.
Originally created by @webslim on GitHub (Sep 7, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/56 I've run into the following issue: 1. open a LUKS device with cryptsetup and mount it 2. start firejail sandbox 3. unmount the drive 4. run "cryptsetup luksClose $device". (outside of the sandbox) -> cryptsetup can't close the dm device and complains that it is still in use.
Author
Owner

@ghost commented on GitHub (Sep 7, 2015):

The device might still be mounted in the firejail's context. Try joining the existing firejail using a firejail --join command and checking to see if it's still mounted in there.

<!-- gh-comment-id:138316042 --> @ghost commented on GitHub (Sep 7, 2015): The device might still be mounted in the firejail's context. Try joining the existing firejail using a `firejail --join` command and checking to see if it's still mounted in there.
Author
Owner

@netblue30 commented on GitHub (Sep 8, 2015):

Each sandbox has an independent mount table/mount namespace. This table starts as a copy of the main system mount table, and evolves independently after that. Your LUKS device has an entry in both the main mount table and in the sandbox mount table. You'll have to unmount it also in the sandbox.

<!-- gh-comment-id:138394792 --> @netblue30 commented on GitHub (Sep 8, 2015): Each sandbox has an independent mount table/mount namespace. This table starts as a copy of the main system mount table, and evolves independently after that. Your LUKS device has an entry in both the main mount table and in the sandbox mount table. You'll have to unmount it also in the sandbox.
Author
Owner

@webslim commented on GitHub (Sep 11, 2015):

Thank you!

<!-- gh-comment-id:139540139 --> @webslim commented on GitHub (Sep 11, 2015): Thank you!
Author
Owner

@netblue30 commented on GitHub (Sep 11, 2015):

you're welcome

<!-- gh-comment-id:139566370 --> @netblue30 commented on GitHub (Sep 11, 2015): you're welcome
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#30
No description provided.