[Pkg-cryptsetup-devel] Bug#389835: better out of the box luks root migration support

maximilian attems maks at sternwelten.at
Thu Sep 28 01:25:23 UTC 2006


Package: cryptsetup
Version: 2:1.0.4~rc2-1
Severity: normal

hello David,

pushed my an Manoj trial and error i wanted to retry an encrypted root
on current swap partition. did the following steps
 cryptsetup  luksFormat /dev/sda2
 cryptsetup luksOpen /dev/sda2 sda2
 mkfs.ext3 /dev/mapper/sda2
 mount /dev/mapper/sda2 /mnt/sda2
 mount /dev/sda1  /mnt/sda1 # root
 cd /mnt/sda2; cp -a /mn/sda1/* .

now having my newly encrypted root i thought to be easily boot of it,
the encountered troubles where:
1) initramfs had no cryptsetup bin
2) initramfs had no dm_crypt, sha256 and aes modules
3) README.initramfs did not document bootarg

to resolve 1) and 2) please do put those binaries unconditionaly,
on the initramfs unless the cryptoroot hook is invoked with an dep arg
for MODULES=dep usage. any other initramfs-tools hook support lands
there so this was really counter-inituitive.
also luks doesn't need an /etc/cryptoroot entry afaik?

the following bootarg worked fine, please add it to the doc
root=/dev/sda2 ro cryptopts=target=sda2

thanks + best regards
maks

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (900, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages cryptsetup depends on:
ii  dmsetup                      2:1.02.08-1 The Linux Kernel Device Mapper use
ii  libc6                        2.3.6.ds1-4 GNU C Library: Shared libraries
ii  libdevmapper1.02             2:1.02.08-1 The Linux Kernel Device Mapper use
ii  libgcrypt11                  1.2.3-2     LGPL Crypto library - runtime libr
ii  libgpg-error0                1.4-1       library for common error values an
ii  libpopt0                     1.10-3      lib for parsing cmdline parameters
ii  libuuid1                     1.39-1      universally unique id library

cryptsetup recommends no packages.

-- no debconf information




More information about the Pkg-cryptsetup-devel mailing list