[Pkg-cryptsetup-devel] mount.dmcrypt

Jonas Meurer jonas at freesources.org
Tue May 30 14:48:57 UTC 2006


On 27/05/2006 Christian Thaeter wrote:
> I made a very simple mount helper-script for mounting removeable
> encrypted media as user:
>  http://www.pipapo.org/pipawiki/mountdmcrypt
> 
> Some People told me they would like to see that in Debian, so let me ask
> you if you have any interest in either including it with cryptsetup
> (would add a dependency on sudo) or package it separately. I think
> asking you first is the proper way. While it is currently just in a
> 'works-for-me' state I would offer to improve and doing upstream
> maintainace for it when you like to take it.

hello Christian,

your scripts looks interesting, even though i see several problems with
the current implementation, and the design in general.

the remaining problems of the current implementation can be fixed
relatively easy: support LUKS devices, keys on removable media and all
the other useful options that cryptdisks (the cryptsetup init script in
the debian package) already support.

but i see general problems with a mount helper-script as well:
dmcrypt is treated like a filesystem, while the real filesystem lies
under dmcrypt. therefore any features that mount offers for filesystems
can be used for running cryptsetup, but not for the mount of the
underlying filesystem.

still i'dd like to see it in the debian cryptsetup package. it could be
installed as /usr/share/doc/cryptsetup/examples/mount.dmcrypt with some
text in README.Debian to advertise it.

i don't like the idea of installing it into $PATH because of the reasons
mentioned above, and because two conflicting implementations should not
be supported in parallel. and mount.dmcrypt conflicts with
/etc/init.d/cryptdisks.

is that ok for you?

do you plan to add LUKS support soon? if this is the case, i'll wait
with adding the script to cryptsetup's examples directory.
the next upload is not planed to happen in the next weeks anyway.

...
 jonas



More information about the Pkg-cryptsetup-devel mailing list