Bug#695410: grub-common: grub-mkconfig not implemented correctly for crypto disks

Ximin Luo infinity0 at gmx.com
Fri Dec 7 20:08:12 UTC 2012


Package: grub-common
Version: 2.00-7
Severity: normal

grub-mkconfig is implemented incorrectly causing detection of cryptodisks to fail.

I have attached a patch that makes it work correctly, but you probably want to
tidy it up some further. For example, GRUB_CRYPTODISK_ENABLE is only effective
if its value is "y", which is inconsistent with the other settings.

This patch makes running `update-grub`, able to generate a grub.cfg for an
encrypted /boot volume. This /boot volume will not boot by itself, but will
boot if you copy the grub.cfg to an unencrypted /boot which you might carry
around on a USB stick on your person. I have verified this personally and am
now using a fully encrypted system volume with separated unencrypted boot
device that is physically secure.

Related bugs:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542165
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463107

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.4-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages grub-common depends on:
ii  gettext-base        0.18.1.1-9
ii  libc6               2.13-35
ii  libdevmapper1.02.1  2:1.02.74-4
ii  libfreetype6        2.4.9-1
ii  libfuse2            2.9.0-2
ii  liblzma5            5.1.1alpha+20120614-1
ii  zlib1g              1:1.2.7.dfsg-13

Versions of packages grub-common recommends:
ii  os-prober  1.56

Versions of packages grub-common suggests:
ii  console-setup  1.87
ii  desktop-base   7.0.3
pn  grub-emu       <none>
pn  multiboot-doc  <none>
pn  xorriso        <none>

-- no debconf information

-- debsums errors found:
debsums: changed file /usr/sbin/grub-mkconfig (from grub-common package)
debsums: changed file /usr/share/grub/grub-mkconfig_lib (from grub-common package)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: grub.patch
Type: text/x-diff
Size: 965 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-grub-devel/attachments/20121207/442bd413/attachment.patch>


More information about the Pkg-grub-devel mailing list