[Pkg-cryptsetup-devel] Bug#455508: MODULES="most" does not mean "all"

Jonas Meurer jonas at freesources.org
Tue Jan 29 11:14:28 UTC 2008


On 29/01/2008 Piotr Roszatycki wrote:
> I don't understand this argument. Just now, my initrd is full of
> unused modules. I.e.: DAC960, cpqarray, cdrom, ieee1394 and *all*
> network and SCSI drivers. You just wrote that you're against adding 3
> another drivers which are required to boot Debian systems. Of course,
> I can workaround it by modification of /etc/crypto, but it is not
> intuitive as far as I have to run update-initrd too and I think the
> crypto modules are more important than some ancient and unused
> hardware drivers.

Hey Piotr,

I'm not responsible for the "unused modules" in your initramfs. Please
blame the initramfs maintainer (or whoever is responsible) for that.

For cryptsetup, the correct way is to configure cipher, size and hash in
/etc/crypttab, and run update-initramfs after doing so.

You should configure the exact cipher, size and hash in /etc/crypttab
for other reasons as well. Ciphers continue to develop, and maybe some
day we change the default. This would not be possible if everybody just
trusts in the default settings being consistent forever.

I still object against adding yet another crypto module to the list of
default modules that initramfs loads.

greetings,
 jonas





More information about the Pkg-cryptsetup-devel mailing list