Re: [rfc] Dropping loop-aes from d-i
On Wed, Mar 31, 2010 at 01:10:57PM +0200, Frans Pop wrote:
> On Wednesday 31 March 2010, Max Vozeler wrote:
> > a couple of factors which make me consider dropping support for
> > loop-aes from d-i (mostly partman-crypto).
> So what should people now use for encrypted swap without passphrase?
Debian cryptdisk scripts support that as well.
> Hmmm. OTOH, I do have that on one laptop and it works fine with upstream
> kernels (at least, I've never noticed a problem). Wonder what exactly I
> did there.
In partman-crypto, IIRC we just configure the encrypted
mapping to use /dev/urandom as keyfile and add the "swap"
option in crypttab. That ensures mkswap is run.