[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#385629: debian-installer: Encrypted filesystem setup and swap



On (10/10/06 09:19), Max Vozeler wrote:
> Hi James,

Hi Max,

> 
> On Mon, Oct 09, 2006 at 11:59:55PM +0100, James Westby wrote:
> > I am playing around with the installer and I believe I have hit this
> > problem.
> > 
> > If I select automatically set up LVM and crypto I get a good setup,
> > but if I then go to Configure encrypted partitions I am told I can't
> > as swap is not encrypted.
> > 
> > The swap is an LVM partition on a dm-crypt device, so I think
> > partman-crypto's detection of encrypted swap in this case is not
> > working. 
> 
> Ah, good catch. Our swap check takes the swap device and checks if it's
> an encrypted loop (using losetup) or dm device (dmsetup). In case of
> swap-on-LVM-on-crypto, the check only sees swap-on-LVM and so concludes
> that the setup is unsafe.

I have no idea about how to play around with the installer, but the code
looks very clean, and I can fire up a VM to investigate, so I'll see if
I can come up with anything resembling a patch tonight.

> 
> > [Also it seems that I cannot delete an encrypted partition, even if I
> > get to free space on it, it still says "In use for ...", is there a way
> > to do this? It was annoying having to restart the installer every time I
> > wanted to try something different. Could you point me to the apprpriate
> > package for this, I'm not sure it is partman-crypto]
> 
> Deleting encrypted partitions has not been implemented. The relevant
> package is partman-crypto.
> 

Yeah, thanks I saw the report poking around a bit more.

I do have a couple of other bugs for you though, I'll file them later
when I have more information.

James

-- 
  James Westby   --    GPG Key ID: B577FE13    --     http://jameswestby.net/
  seccure key - (3+)k7|M*edCX/.A:n*N!>|&7U.L#9E)Tu)T0>AM - secp256r1/nistp256




Reply to: