[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#930228: marked as done (partman-crypto: cryptsetup's initramfs integration was moved to a separate package)

Your message dated Thu, 28 Nov 2019 10:04:34 +0000
with message-id <E1iaGf4-0009RQ-BR@fasolo.debian.org>
and subject line Bug#930228: fixed in partman-crypto 106
has caused the Debian Bug report #930228,
regarding partman-crypto: cryptsetup's initramfs integration was moved to a separate package
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
930228: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930228
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: partman-crypto
Version: 103
Severity: wishlist

Hi there,

Since 2:2.0.3-1 the ‘cryptsetup’ package is a transitional dummy package
for ‘cryptsetup-run’ (various scripts and helpers/wrappers) and
‘cryptsetup-initramfs’ (initramfs integration, depending on the former).

    https://tracker.debian.org/news/965549/accepted-cryptsetup-2203-1-source-amd64-all-into-unstable-unstable/

partman-crypto's ‘finish.d/crypto_aptinstall’ currently (v103) runs
`apt-install cryptsetup`.  This works as far Buster is concerned, but
spews the following warning upon `update-initramfs -u`

    WARNING: The initramfs image may not contain cryptsetup binaries nor crypto modules.
    If that's on purpose, you may want to uninstall the 'cryptsetup-initramfs' package
    in order to disable the cryptsetup initramfs integration and avoid this warning.

if no encrypted volume needs to be unlocked at initramfs stage (for
instance if they're holding /home or /var, but not /).  Hence the
‘Severity: wishlist’.

Our (cryptsetup maintaining team) plan is to rename ‘cryptsetup-run’ to
‘cryptsetup’ once Buster is released, hence this bug should be RC at
this point: with `apt-install cryptsetup` the initramfs integration
won't be installed anymore.  (While it's required for encrypted volumes
holding /, /usr, and/or the resume device(s).)

Post-Buster, replacing `apt-install cryptsetup` with `apt-install
cryptsetup-initramfs` should be enough to downgrade the severity back to
‘wishlist’.

The real fix would be to have a detection logic triggering `apt-install
cryptsetup` whenever there are crypt targets in the dm table, and
`apt-install cryptsetup-initramfs` if any volume needs to be unlocked at
initramfs stage, i.e., holding /, /usr, and/or the resume device(s).

Thanks for maintaining d-i in Debian!
-- 
Guilhem.

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message --- 
Source: partman-crypto
Source-Version: 106

We believe that the bug you reported is fixed in the latest version of
partman-crypto, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 930228@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Cyril Brulebois <kibi@debian.org> (supplier of updated partman-crypto package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 28 Nov 2019 10:50:19 +0100
Source: partman-crypto
Binary: partman-crypto partman-crypto-dm
Architecture: source
Version: 106
Distribution: unstable
Urgency: high
Maintainer: Debian Install System Team <debian-boot@lists.debian.org>
Changed-By: Cyril Brulebois <kibi@debian.org>
Description:
 partman-crypto - Add to partman support for block device encryption (udeb)
 partman-crypto-dm - Add to partman support for dm-crypt encryption (udeb)
Closes: 930228
Changes:
 partman-crypto (106) unstable; urgency=high
 .
   * Merge patch by Guilhem Moulin to pull cryptsetup-initramfs instead of
     cryptsetup, since the former is now responsible for the cryptsetup
     initramfs integration (Closes: #930228).
Checksums-Sha1:
 7a063071114c4674a42ed5be080c95457136c0f8 1774 partman-crypto_106.dsc
 0b8d6f85f4f39d76112e234be23afdb26f27ecc9 266172 partman-crypto_106.tar.xz
 1a6a27d319503fc372c58ba0d71692bd635eda03 5961 partman-crypto_106_source.buildinfo
Checksums-Sha256:
 f5895e1d15df0dd61ac054f611ae737b86668846b232a9a30fbb705a8a1707fd 1774 partman-crypto_106.dsc
 5bc313c478ca656855b9de93aeaf66c1b863a5270bf446712acb02b117a74302 266172 partman-crypto_106.tar.xz
 7f8337d3f86dbed70ac3c1f08cc1039c549d25234fe9b10219b72bfa40a1667a 5961 partman-crypto_106_source.buildinfo
Files:
 a6851b906f9018e9d5de91b5539c83f5 1774 debian-installer optional partman-crypto_106.dsc
 ccabca645167bb3145c6ff576f849124 266172 debian-installer optional partman-crypto_106.tar.xz
 314b1347f8bb7702eb6099527d6a59fc 5961 debian-installer optional partman-crypto_106_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtg6/KYRFPHDXTPR4/5FK8MKzVSAFAl3fmJMACgkQ/5FK8MKz
VSAwaBAAt682Ot4FGBknfAfviZ6g3GZzFiVkRX3bDrJQ4LjHqg24f6tDX3X06fRk
9XcFMGqhCdc/KSIlQiAyaRjkoFYP+W9dFfdjeFST7Zs2Ksk4zechWYj6XIFQs4Kg
hlAEdQcTXEmN7iydJ3NHrzeetisnbWSchT9RkTgbTYQTghinkmrIgWaQ7cFarcIR
gsMv55BkMxDP1zRw7P26PpevE4ady2XR9OjzUYzYBkNB95QSBB04da4+DFieRwhV
ZBE3Fru8n7wpsDdFsCGN/7fP9n0YSgHFvd7UKdMEPoRDXBRXdTclWrt+CoW1cBlV
L63sbd0tjO4px5v5SOBEzI+HgZD99iSHopfqrmyIqmg/YYfdG8GKfv1v4XzPtWlg
eEM6W0eOm97WC3JwFMeyK8EAA++pDOXtcrJebR9+bSUKKoWRWo1QiGTuONRZcOQ0
yEXH4yw5oUQlY+xcoHQdYU/fwVIBQ+qJWOBPcNKMJiJq1I8S/4V2KNi4bYbBg2qQ
poBDT6xL2H8eqr7KxCKVQoFlSGtVVv+2B3z7GHK57a7C/QUB/GGExH8d6SLa+ZDX
DqJLffItkDm7aWEVj+H7ClqtGTfUn+UNlBDSmkh9epAPHldjQ83BoDkvXBvwEpOv
5rlk8oUe/ZZG9S1YJpBvB3qR70f2tcOgkm7lVyfu4uPb0zUS9WI=
=RCQa
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: