[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#486360: debian-installer: loop-aes root fs encryption unusable due to incomplete initrd



Package: debian-installer
Version: lenny beta 2
Severity: normal

This problem applies to both the newt as well as the gtk interface.
When encrypting the root partition using loop-aes (cipher AES256) 
the system hangs in the initramfs shell after reboot, waiting for the 
root files system.

1. During the installation the GPG keyfile gets stored under 
/target/etc/loopkeys/ and not copied into the initrd image.

2. The following required binaries and libs are missing in the 
initrd image:
/bin/gpg
/sbin/losetup
/lib/libresolv.so.2
/lib/libusb-0.1.so.4
/lib/libz.so.1

3. The initrd is missing a script probing for AES-encrypted partitions 
and asking for passphrases


Fixing this would probably require some modifications to 
/usr/lib/finish-install.d/05crypto.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash



Reply to: