[dm-crypt] contribution offer and questions - LUKS system encryption with detached header
jfelyokees at shmem.com
Tue Oct 23 11:44:42 CEST 2012
Thanks for your reply, Arno.
> The reason there are no such scripts in the cryptsetup package
> is that it would not make sense to put them in there, as they
> would be completely different for different distributions.
Perhaps we're using the word 'package' differently. If one executes
"dpkg -L cryptsetup" on Debian, Ubuntu or Mint, one does see the
associated init crypto scripts. I was saying I don't see them in the
source code at http://code.google.com/p/cryptsetup
I understand now that the scripts can be specific to the distribution.
But I've also observed that they're identical or virtually so for
Debian, Ubuntu & Mint for each release of cryptsetup. For example, the
cryptroot scripts are exactly the same for deb-test-121015 & kubuntu
12.10. FWIW, they're both at cryptsetup 1.4.3.
One thing I still don't understand is where the scripts are for (say)
cryptsetup 1.5.1. I haven't seen a distribution for that version. Does
that mean they don't exist yet? I've seen that the scripts may need to
be modified as functionality is added to cryptsetup, e.g.
--allow-discards. So while my use of cryptsetup 1.4.1 with my modified
1.1.3 scripts worked for my purpose, that system I created doesn't
support discards/TRIM requests even though the option is in cryptsetup.
Accordingly, the scripts can also be specific to the cryptsetup
version. That might suggest that someone is enhancing the scripts as
features are added to cryptsetup.
Regarding your recommendations, I'll make the changes to the 1.4.3
scripts and submit them to Debian. Can someone tell me how to do that?
I looked at debian.org and see maybe hundreds of mailing lists but
nothing obvious about the submission process if it's not a bug.
Regarding Mint, I thought it is based on Debian via Ubuntu. It looks
like I would use the "idea module" of the Mint web site. But is there
an advantage to submitting to Mint, too, since as you say, it should
eventually propagate down?
More information about the dm-crypt