[dm-crypt] contribution offer and questions - LUKS system encryption with detached header

Arno Wagner arno at wagner.name
Tue Oct 23 21:07:04 CEST 2012


On Tue, Oct 23, 2012 at 05:44:42AM -0400, Jim F wrote:
> 
> Thanks for your reply, Arno.

No problem.
 
> >The reason there are no such scripts in the cryptsetup package
> >is that it would not make sense to put them in there, as they
> >would be completely different for different distributions.
> 
> Perhaps we're using the word 'package' differently. If one executes
> "dpkg -L cryptsetup" on Debian, Ubuntu or Mint, one does see the
> associated init crypto scripts. I was saying I don't see them in the

Yes, but that would be the _Debian_ cryptsetup package which
is derived by the Debian cryptsetup package maintainer from 
the proper cryptsetup package... 

> source code at http://code.google.com/p/cryptsetup

...which is maintained here.

> I understand now that the scripts can be specific to the
> distribution. But I've also observed that they're identical or
> virtually so for Debian, Ubuntu & Mint for each release of
> cryptsetup. For example, the cryptroot scripts are exactly the same
> for deb-test-121015 & kubuntu 12.10. FWIW, they're both at
> cryptsetup 1.4.3.

That is actually a good idea, but they are created by
the Debian project cryptsetup maintainer, not here.

> One thing I still don't understand is where the scripts are for
> (say) cryptsetup 1.5.1. I haven't seen a distribution for that
> version. Does that mean they don't exist yet? I've seen that the

Yes.

> scripts may need to be modified as functionality is added to
> cryptsetup, e.g. --allow-discards. So while my use of cryptsetup
> 1.4.1 with my modified 1.1.3 scripts worked for my purpose, that
> system I created doesn't support discards/TRIM requests even though
> the option is in cryptsetup. Accordingly, the scripts can also be
> specific to the cryptsetup version. That might suggest that someone
> is enhancing the scripts as features are added to cryptsetup.
> 
> Regarding your recommendations, I'll make the changes to the 1.4.3
> scripts and submit them to Debian. Can someone tell me how to do
> that? 

On the Debian project website, search for the cryptsetup package 
in the package search. The  Debian maintainer and development team 
addresses for cryptsetup should be there. Just contact them.

> I looked at debian.org and see maybe hundreds of mailing lists
> but nothing obvious about the submission process if it's not a bug.
> 
> Regarding Mint, I thought it is based on Debian via Ubuntu. It looks
> like I would use the "idea module" of the Mint web site. But is
> there an advantage to submitting to Mint, too, since as you say, it
> should eventually propagate down?

I don't think so.

Arno
-- 
Arno Wagner,    Dr. sc. techn., Dipl. Inform.,   Email: arno at wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
One of the painful things about our time is that those who feel certainty 
are stupid, and those with any imagination and understanding are filled 
with doubt and indecision. -- Bertrand Russell 


More information about the dm-crypt mailing list