[pkg-cryptsetup-devel] Bug#994219: cryptsetup: support and/or document alternative location(s) for keyscripts

Christoph Anton Mitterer calestyo at scientia.net
Tue Sep 14 02:39:29 BST 2021


Package: cryptsetup
Version: 2:2.4.0-1
Severity: wishlist


Hey.

AFAIK, keyscripts are always loaded from /lib/cryptsetup/scripts/, right?

Likey the check= option, keyscript= should either support to specify a full
path and/or cryptsetup should support alternative location(s).

Otherwise, people have to place their own keyscripts in /lib/cryptsetup/scripts/
where they could get in principle overriden.


*If* alternative location(s) would be introduced the question would be where.
I kinda wouldn't like having it in /etc/ since per FHS this is for
configuration, which keyscript clearly aren't.

Maybe something in /usr/local/?
While /usr/local/lib/cryptsetup/scripts/ would clone the current schema
it would IMO be still wrong in terms of the FHS, which rather mandates
libexec for such purpose.

Of course, keyscripts of the same name should be preferred from the /usr/local
path then.



Cheers,
Chris.



More information about the pkg-cryptsetup-devel mailing list