>10/06/2011 17:54, Christian Jaeger wrote:
> Thanks for your reply. I got it to work now.
> 
>> 2011/6/10 tv.deb...@googlemail.com <tv.deb...@googlemail.com>:
[...]
> 
>> Maybe cp the /usr/share/initramfs-tools/hooks/cryptroot hook script to
>> /etc/initramfs-tools/hooks/, this shouldn't be necessary though.
> 
> My system didn't have the /usr/share/initramfs-tools/hooks/cryptroot
> file; while trying to figure out why, I realized that the "cryptsetup"
> package wasn't installed! After installing it, update-initramfs now
> creates an initrd that *does* contain cryptsetup.
> 
> I expected that the installer would install cryptsetup automatically
> (at least) if the user creates encrypted partitions using its
> partitioner. I would say this is a bug of the installer; anyone
> disagreeing?
> 
[...]
> 
> So I'm looking forward to report a bug against the installer (actually
> several, since it didn't install busybox either).

This is weird, when I last tried I didn't experience any problem and all
required packages were installed. Which install mode did you use, from
what media (if you have the download url that would be even better) ?


> BTW is there a way to make the boot process cache the pass phrase, so
> that when I'm using the same for several partitions it would only ask
> once?
No that I know of, and I wouldn't use luks if it was caching the
pass-phrase leaving it accessible for "reuse". I think that would defeat
the purpose. You can use decrypt_derived or random key for the swap
partition for instance, and use pam-mount for the others, it will save
you some typing at the cost of having the same password for account
login and luks decryption. Or store the key on a different media
plugged-in at boot time, or on the first decrypted partition (insecure).
It's all a matter of compromise between security and comfort/usability.



> 
> Christian.
> 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/4df28329.7030...@googlemail.com

Reply via email to