[pkg-cryptsetup-devel] Bug#994486: cryptsetup-initramfs: include askpass only when needed?

Guilhem Moulin guilhem at debian.org
Sun Oct 3 13:10:03 BST 2021


On Thu, 16 Sep 2021 at 17:41:17 +0200, Christoph Anton Mitterer wrote:
> I think it would be nice if askpass was only included when actually
> needed.
> 
> That seems to be the case, when no keyscript is set, and the KEY field is none,
> cause:
> […]
> Does the attached patch seem reasonable (haven't had the time to test it).

That logic is a no-go because the cryptopts= kernel boot argument might
require askpass and the hook can't foresee whether that will be used or
not.  A safe approach is to add a hook option to *opt-out* from
`askpass` (and `cryptroot-unlock` which is useless without askpass)
inclusion and save these meager kiB.

-- 
Guilhem.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-cryptsetup-devel/attachments/20211003/3b49d468/attachment.sig>


More information about the pkg-cryptsetup-devel mailing list