[Pkg-cryptsetup-devel] Re: batch mode?

[gebi at sbox.tugraz.at]

Quoting Jonas Meurer <jonas at freesources.org>:

> i agree with you, only it would be useful for providing a timeout
> function in cryptdisks. but when the patch for cryptsetup is accepted by
> clemens, that is quite a better solution.

I'll test it after my last exam on 6.2 and send it to clemens. We  
could also put it into dpatch as long as it's not accepted upstream.

> ok, so either we should improve luksformat to support fs images, or
> grml-crypt needs to be restricted to exactly that. i don't know what you
> think, but i gues that luksformat is a cleaner implementation.

luksformat needs perl which could be quite hard in initrd.
Imho we should hack cryptsetup directly to support filesystemimages.
Take the evilness at the root ;).

> yes, it's a workaround. i'dd prefer a clean implementation, best would
> be to have dm-crypt support in mount ;-)
> nevertheless grml-crypt is a handy script, and i believe that it's very
> useful for your grml distribution.

Yes it's written not for static, but for dynamic things.
Quickly creating a encrypted fileystem image or quickly start it.

For all other things there is /etc/crypttab
but this is unusable for a live-cd.

greets,
Michael