[pkg-cryptsetup-devel] Upcoming transition: libcryptsetup4 -> libcryptsetup12

[Cyril Brulebois]

Hi,

Guilhem Moulin <guilhem at debian.org> (2017-12-17):
> On Sun, 17 Dec 2017 at 13:32:55 +0100, Cyril Brulebois wrote:
> > Jonas Meurer <jonas at freesources.org> (2017-12-17):
> >> Debian-boot is Cc'ed as cryptsetup provides udebs, so
> >> debian-installer is affected as well.
> > 
> > Thanks for letting us (debian-boot@) know. AFAICT, on the udeb side
> > we only have crypsetup-udeb that depends on its library udeb, and no
> > other udebs are in the loop.
> 
> FWIW 2:2.0.0~rc1-1 (and soon 2:2.0.0-1) adds new dependencies on
> libargon2-0 and libjson-c3, that don't have udebs yet.  We filed
> #880525 and #880526 on Nov. 1 but didn't hear back from the respective
> maintainers yet, and so far didn't have time to write the patches
> ourselves.

FWIW, feel free to (x-debbugs-)cc debian-boot@ when requesting such
additions; you might get some feedback like a patch or two, or
alternative routes to consider.

I hadn't spotted libcryptsetup12-udeb isn't installable due to these
dependencies, as experimental isn't checked automatically:
  https://d-i.debian.org/dose/

I've added this as a todo item, along with looking into src:argon2 and
src:json-c. I'll try to look into that next week (ping welcome), but
we'll need to get those packages past NEW; it would be appreciated to
only start the cryptsetup transition once dependencies can be satisfied,
to avoid breaking d-i daily builds purposefully.


Also, from one the those two bugs: “cryptsetup ≥2.0.0 introduces a new
on-disk “LUKS2” format, which support Argon2i and Argon2id as PBKDF.”

Is that a new default format? Does it need any special handling from
d-i components, like options or files to create, or is that just a
transparent change for cryptsetup callers?


Alternatively, instead of waiting for udebs to be available for the
dependencies, maybe support for those two libraries could be patched
out temporarily in the cryptsetup udebs?


Cheers,
-- 
Cyril Brulebois (kibi at debian.org)            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-cryptsetup-devel/attachments/20171217/6d938516/attachment.sig>