Hi, Guilhem Moulin <guilhem@debian.org> (2017-12-17): > On Sun, 17 Dec 2017 at 13:32:55 +0100, Cyril Brulebois wrote: > > Jonas Meurer <jonas@freesources.org> (2017-12-17): > >> Debian-boot is Cc'ed as cryptsetup provides udebs, so > >> debian-installer is affected as well. > > > > Thanks for letting us (debian-boot@) know. AFAICT, on the udeb side > > we only have crypsetup-udeb that depends on its library udeb, and no > > other udebs are in the loop. > > FWIW 2:2.0.0~rc1-1 (and soon 2:2.0.0-1) adds new dependencies on > libargon2-0 and libjson-c3, that don't have udebs yet. We filed > #880525 and #880526 on Nov. 1 but didn't hear back from the respective > maintainers yet, and so far didn't have time to write the patches > ourselves. FWIW, feel free to (x-debbugs-)cc debian-boot@ when requesting such additions; you might get some feedback like a patch or two, or alternative routes to consider. I hadn't spotted libcryptsetup12-udeb isn't installable due to these dependencies, as experimental isn't checked automatically: https://d-i.debian.org/dose/ I've added this as a todo item, along with looking into src:argon2 and src:json-c. I'll try to look into that next week (ping welcome), but we'll need to get those packages past NEW; it would be appreciated to only start the cryptsetup transition once dependencies can be satisfied, to avoid breaking d-i daily builds purposefully. Also, from one the those two bugs: “cryptsetup ≥2.0.0 introduces a new on-disk “LUKS2” format, which support Argon2i and Argon2id as PBKDF.” Is that a new default format? Does it need any special handling from d-i components, like options or files to create, or is that just a transparent change for cryptsetup callers? Alternatively, instead of waiting for udebs to be available for the dependencies, maybe support for those two libraries could be patched out temporarily in the cryptsetup udebs? Cheers, -- Cyril Brulebois (kibi@debian.org) <https://debamax.com/> D-I release manager -- Release team member -- Freelance Consultant
Attachment:
signature.asc
Description: PGP signature