CSI luks open error

[sergelogvinov]

Hello, containerd-2.0 does not have /dev/stdin device in container.

scaleway-csi/pkg/driver/luks_utils.go

Line 26 in da008b4

"--key-file", "/dev/stdin", // read the passphrase from stdin

This simple changes fix it

	args := []string{
		"-q",                      // don't ask for confirmation
		"luksFormat",              // format
		"--hash", defaultLuksHash, // hash algorithm
		"--cipher", defaultLuksCipher, // the cipher used
		"--key-size", defaultLuksKeyize, // the size of the encryption key
		devicePath,                 // device to encrypt
		"--key-file=-" // read the passphrase from stdin
	}

need to replace from "--key-file", "/dev/stdin" to --key-file=- everywhere

Thanks

[Tomy2e]

Hello,

It's OK for me to use - instead of /dev/stdin.

However, I'm unable to reproduce this issue with containerd v2. During my tests with a kubeadm cluster running on Ubuntu 24.04, I found that /dev/stdin is always present in the container.

Can you give me more information about your setup so that I can reproduce the issue? For example:

• the Kubernetes distribution
• the OS of the nodes
• the containerd version
• the containerd config

[sergelogvinov]

Hello, thank you for your reply.

I am currently using Talos (talos.dev) version 1.10.5 with containerd 2.0.5.

The issue is reproducible on both Talos v1.10.x and v1.9.x. At the moment, I am using my fork with these changes... Everything work as expected.

If you’re okay with it, I can create a PR with these changes.
Thanks.

[Tomy2e]

You are right, I was able to reproduce the issue with this exact version of Talos. I just pushed PR #77 which should fix that. This fix will be part of version v0.3.4 of the CSI, which I will publish very soon.
Thanks a lot for your feedback!