Debian 12 Non root device Unlocking issues with Tang

[bigops]

In Debian 12 non root devices are not unlocked with just /etc/crypttab entries (with _netdev). With only crypttab the system silently fails to unlock and does not wait for the password. Adding the mapped devices in /etc/fstab with the _netdev option successfuly gives the password prompt and unlocks with Tang. The behavior was different in Debian 11 where crypttab entry alone will unlock the device

[sarroutbi]

Hello @bigops : is this issue related to the new release, clevis-20?

[bigops]

The version as per dpkg is 19-2

[cbiedl]

Debian maintainer here, also promising to look into this mailbox more often.
@bigops Sorry to hear about these issues. Although you've found a solution, I'd still like to investigate, so can you describe your setup a bit more in detail?
If I understand correctly you have two encrypted block devices. One holds the root filesystem and is unlocked as expected. The second is something different that however should be unlocked during boot. Important question: Should that unlocking happen in the initrd stage, or later, as part of the regular crypttab handling?
In the first case, adding ",initramfs" to the crypttab should help, see also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000648#20 and /usr/share/doc/clevis-initramfs/README.Debian