[pkg-cryptsetup-devel] Debian Installer Buster RC 2 release

[Cyril Brulebois]

[ Adding cryptsetup maintainer to the loop. ]

Hi,

Darshaka Pathirana <dpat at syn-net.org> (2019-07-01):
> Just a quick note.

Thanks for the feedback.

> On 6/26/19 7:49 PM, Cyril Brulebois wrote:
> > The Debian Installer team[1] is pleased to announce the second release
> > candidate of the installer for Debian 10 "Buster".
> > 
> > 
> > Improvements in this release
> > ============================
> > 
> >  * choose-mirror:Hi
> >     - Update Mirrors.masterlist.
> >  * cryptsetup:
> >     - New section “Unlocking LUKS devices from GRUB” pointing to:
> >       https://cryptsetup-team.pages.debian.net/cryptsetup/encrypted-boot.html
> 
> The guide states the following:
> 
> ,----
> | But as of Buster cryptsetup(8) defaults to a new LUKS header format
> | version, which isn’t supported by GRUB as of 2.04. Hence the
> | pre-Buster workarounds won’t work anymore.
> `----
> 
> But looking at cryptsetup(8)[1], it is not mentioned that luks2
> is default, in fact it seems to tell the opposite:
> 
> [1] https://manpages.debian.org/testing/cryptsetup-bin/cryptsetup.8.en.html
> 
> ,----
> | LUKS2 is a new version of header format that allows additional extensions like
> | different PBKDF algorithm or authenticated encryption. You can format device
> | with LUKS2 header if you specify --type luks2 in luksFormat command. For
> | activation, the format is already recognized automatically.
> `----
> [2] https://gitlab.com/cryptsetup/cryptsetup/blob/master/man/cryptsetup.8#L241
> 
> and
> 
> ,----
> | To use LUKS2, specify --type luks2.
> `----
> [3] https://gitlab.com/cryptsetup/cryptsetup/blob/master/man/cryptsetup.8#L278

That doesn't say much about the default setting; but I can see how one
could read it as “this is not the default”.

> Is the guide wrong or is there a (RC) bug in the man page?

The guide was just written, is correct; and a possible bug in the
manpage wouldn't exactly qualify as release critical.

> P.s. I am not on the list, I read this via debian-devel-announce.

ACK.


Cheers,
-- 
Cyril Brulebois (kibi at debian.org)            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20190701/970c378e/attachment.sig>