[Bug 1223622] Re: add support for crypttab mounting of luks devices with detached headers

[DiagonalArg]

After squashing one bug, I got this working on 12.04 with a root on lvm
on luks (sans header) and boot on USB with lvm.

Usage turned out to be slightly different than I had understood:

*********
Adds a valid option to crypttab:
   header=<filename>

When the initramfs is created, <filename> will be included into the
/conf/conf.d/lukshdr directory of the initramfs.

<filename> will be searched for first in the default conf.d/lukshdr directory (which, in mkinitramfs, defaults to /etc/initramfs-tools/conf.d/lukshdr), then as an absolute path.  While cryptsetup allows the header to be on a device file, this is not an option for these patches, which need the file located in that directory.
***********

I am attaching here the diff for the modified /usr/share/initramfs-
tools/scripts/local-top/cryptroot, to be used with cryptsetup 1.4.1,
which is the version in precise.

** Patch added: "cryptsetup.1.4.1.initrd.cryptroot.scripts.new.patch"
   https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1223622/+attachment/3963839/+files/cryptsetup.1.4.1.initrd.cryptroot.scripts.new.patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to cryptsetup in Ubuntu.
https://bugs.launchpad.net/bugs/1223622

Title:
  add support for crypttab mounting of luks devices with detached
  headers

Status in “cryptsetup” package in Ubuntu:
  Confirmed

Bug description:
  A detached luks header for a luks device is a new feature in
  cryptsetup 1.4.  This is a feature request to allow the unlocking of
  luks devices with detached headers, both as a root device (ie in the
  initrd) as well as using the init system.

  The attached patch only solves part of the issue, support in the init
  system.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1223622/+subscriptions