[dm-crypt] The future of disk encryption with LUKS2

Milan Broz gmazyland at gmail.com
Wed Feb 10 16:39:03 CET 2016


On 02/10/2016 04:09 PM, Sven Eschenberg wrote:
> Actually PARTUUID should have read PARTTYPE-GUID - So there's no reason 
> why moving it to a different partition should not work, updating the 
> PARTTYPE is a trivial step and part of a proper moving operation anyway.

PARTTYPE GUID does not work properly for determining device type and never will.

Hint: check what systemd does with it. There is a "home" GUID. What it says
about device type?
https://www.freedesktop.org/software/systemd/man/systemd-gpt-auto-generator.html

And that's just one example because the reality is not what you would like to see...

For checking device type we have to use blkid (IOW the real device scan).

I know it is not nice academic design but it is reality and, surprise, it works.

> Just imagine the network's linklayer had no idea which upper layer to 
> call, because there's no information on that. TCP/IP again does not have 
> that type of information.
> 
> So either the layering order is fixed and determined, or you actually 
> will need intra-layer relationships for proper operation. As an 
> alternative, leave it to the user's knowledge and handling. But then we 
> don't need partition tables, LUKS-headers or anything else either, 
> afterall you can tell each layer the geometry and parameters manually 
> and use dmsetup for all your tasks.

It is not just black and white.
(Could we avoid these logical fallacies here please?)

Milan


More information about the dm-crypt mailing list