boot delay in buster clients

[Jesse Norell]

Hello,

  I have finished migrating all our older clients to debian 10/buster
and I find that there is a delay (several minutes) when booting that
didn't exist prior to upgrading.  They do boot eventually.  Running
mandos-client manually once booted returns a key very quickly.  Any
ideas what might be going on?  Watching network traffic on the mandos
server shows that some icmp6 traffic is present right away when the
prompt shows requesting a password to boot (ie. I presume right when
mandos' systemd password agent runs).

Thanks,
Jesse


13:59:23.248132 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
13:59:23.555865 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
13:59:23.812223 IP6 :: > ff02::1:ff90:c8cc: ICMP6, neighbor solicitation, who has fe80::4003:c2ff:fe90:c8cc, length 32
13:59:24.836040 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
13:59:24.836247 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
13:59:24.923837 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
13:59:28.579773 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
13:59:36.003643 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
13:59:50.595833 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
14:00:25.132229 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
14:00:25.440221 IP6 :: > ff02::1:ff90:c8cc: ICMP6, neighbor solicitation, who has fe80::4003:c2ff:fe90:c8cc, length 32
14:00:25.983865 IP6 :: > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
14:00:26.464017 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
14:00:26.464162 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
14:00:27.103812 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
14:00:30.943704 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
14:00:40.159600 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
14:01:00.383733 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
14:01:37.247349 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
14:02:50.974467 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::2: ICMP6, router solicitation, length 16
14:03:31.613921 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28
14:03:31.704982 IP6 fe80::4003:c2ff:fe90:c8cc.5353 > ff02::fb.5353: 0 PTR (QM)? _mandos._tcp.local. (36)
14:03:31.787538 IP6 fe80::4003:c2ff:fe90:c8cc > ff02::1:ff0b:ee8e: ICMP6, neighbor solicitation, who has fe80::225:90ff:fe0b:ee8e, length 32
14:03:31.787627 IP6 fe80::225:90ff:fe0b:ee8e > fe80::4003:c2ff:fe90:c8cc: ICMP6, neighbor advertisement, tgt is fe80::225:90ff:fe0b:ee8e, length
 32
14:03:31.788205 IP6 fe80::4003:c2ff:fe90:c8cc.33814 > fe80::225:90ff:fe0b:ee8e.26367: Flags [S], seq 556375031, win 28800, options [mss 1440,sac
kOK,TS val 198019826 ecr 0,nop,wscale 7], length 0
...<key exchange begins and client boots fine at this point>


-- 
Jesse Norell
Kentec Communications, Inc.
970-522-8107  -  www.kci.net