Hi,

On Fri, 20 Jul 2018 at 23:16:09 +0100, Matt Patey wrote:
> I got it working again by changing /usr/share/initramfs-tools/scripts/local-
> top/yubikey-luks as follows:
> 
>  sed -i 's|$|,keyscript=/sbin/ykluks-keyscript|' /cryptroot/crypttab

Please don't do that.  We (cryptsetup package maintainers) replaced
/conf/conf.d/cryptroot and changed its format without notice in the NEWS
file because it's undocumented and thus internal to src:cryptsetup.
Packages outside of src:cryptsetup must stick to the documented
interface; and in use cases where it's not enough, ask us to extend it
rather than using internal details.

Currently there is no current interface to iterate through the initramfs
crypttab(5) and add/change all keyscripts.  I don't think that's the
right way to proceed, either.  Why not adding “keyscript=…” to
/etc/crypttab instead?

Cheers,
-- 
Guilhem.

Attachment: signature.asc
Description: PGP signature

Reply via email to