[Pkg-cryptsetup-devel] Bug#487256: cryptsetup: add dep-scripts option to crypttab

[Christoph Anton Mitterer]

Package: cryptsetup
Version: 2:1.0.6-2
Severity: wishlist

Hi.

I'd like to have something like a dep-scripts=script1,script2,... option
added to crypttab and supported all of by cryptsetup's hooks/scripts
from and for the initrd and the normal boot-scripts and so on ...

The meaning should be the following:
Bevor the keyscript is invoked with the key-file as its parameter, all
dep-scripts are invoked in order.

The main idea behind this is,.. that the dep-scripts could do tasks
like:
- mount the filesystem where you find the key-file
  (That's my main-reason, as I need all this in the initrd of an USB
stick from which I boot, and the USB-stick must be mounted in order to
have access to the keyfile. I don't want to put the key file in the
initrd itself)
- kill unsecure applications that might otherwise get access to the
keyfile
- etc.

Any ideas?

I also thought about making this an parameter to the key-script itself,
but I don't think that making the key-file available is the key-scripts
task, is it?

Best wishes,
Chris.


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cryptsetup depends on:
ii  dmsetup                      2:1.02.25-1 The Linux Kernel Device
Mapper use
ii  libc6                        2.7-12      GNU C Library: Shared
libraries
ii  libdevmapper1.02.1           2:1.02.25-1 The Linux Kernel Device
Mapper use
ii  libpopt0                     1.14-3      lib for parsing cmdline
parameters
ii  libuuid1                     1.40.8-2    universally unique id
library

cryptsetup recommends no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5108 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-cryptsetup-devel/attachments/20080620/b5a9c006/attachment.bin