breezy: initramfs-tools support for encrypted root
Ilkka Tuohela
hile at nixu.com
Sat Oct 8 02:52:31 CDT 2005
I opened a bug about the problem that we don't have encrypted root fs
support in breezy at all, see
(http://bugzilla.ubuntu.com/show_bug.cgi?id=15661)
This will be a major problem for users upgrading from hoary and who have
setup encrypted root filesystem - after upgrading kernel from the hoary
one, the system is not bootable.
There is a patch in bugzilla, which _should_ do nothing if parameter
encrypted=/dev/mapper/something is not given on command line, and even
less if cryptsetup package is not installed (does not do anything in
this case).
The patch only supports i386 for now, because I wasn't sure which
modules should be loaded on these platforms: seems that instead of
aes-i586 we should use the 'aes' module on other platforms.
In addition, my patch does not actually help users with existing
cryptoroot, because you have to add encrypted= parameter to grub
configuration for it to actually work. Only thing it actually helps
with is that from grub you can still give that parameter manually, if
the patched initramfs has been used - all necessary tools _are_ there.
I don't suggest that we should add this patch to breezy this late, but
maybe there should be instructions how to patch your own copy of
initramfs-tools in the package, and add the patch file to the package?
Still applies nicely to 0.32 and I'm using it now, so this should allow
users to at least fix this problem, while making it a bit hard.
I will be hosting my own, compiled i386 initramfs-tools version with
in http://ner.dy.fi/patches/ directory, but this is of course
unofficial...
Maybe we could add a warning to release notes as well, and my favorite
one: add cryptsetup package to the live CD so that you can use it to
do rescue of existing, broken system easily. And update the encrypted
root filesystem howto for breezy ;)
Sad that I wrote this patch so late it wasn't ready for breezy...
*hile*
More information about the ubuntu-devel
mailing list