[ubuntu/wily-proposed] cryptsetup 2:1.6.6-5ubuntu1 (Accepted)
Andy Whitcroft
apw at ubuntu.com
Fri Jul 31 14:50:13 UTC 2015
cryptsetup (2:1.6.6-5ubuntu1) wily; urgency=low
* Merge from Debian unstable. Remaining changes:
- debian/control:
+ Bump initramfs-tools Suggests to Depends: so system is not
potentially rendered unbootable.
+ Depend on plymouth.
+ Invert the "busybox | busybox-static" Recommends, as the latter
is the one we ship in main as part of the ubuntu-standard task.
+ Drop explicit libgcrypt11 dependency from libcryptsetup4.
* Dropped changes, now in Debian:
- Remove hardcoded paths to udevadm.
- debian/initramfs/cryptroot-hook:
+ Do not unconditionally include cryptsetup utils in the initramfs.
+ Do not include any modules or utils in the initramfs, unless
rootfs/resume devices are encrypted or CRYPTSETUP is set to 'y' in
the initramfs.conf configuration file.
- debian/cryptsetup.maintscripts:
+ Migrate upstart jobs to new names.
cryptsetup (2:1.6.6-5) unstable; urgency=high
* debian/cryptdisks.functions: fix the precheck for ubuntu+upstart
before invoking 'status cryptdisks-udev'. (closes: #773456)
* debian/cryptdisks.functions: fix the insufficient grep regex for
detecting a running cryptdisks-udev (upstart) init script.
cryptsetup (2:1.6.6-4) unstable; urgency=medium
[ Simon McVittie ]
* debian/initramfs/cryptroot-script: decrypt /usr as well as / so that
split-/usr will work with initramfs-tools (>= 0.118). (closes: #767832)
[ Jonas Meurer ]
* debian/cryptdisks.funcctions: check for cryptdisks-udev initscript before
actually invoking 'status' on it. It's only useful in ubuntu+upstart
environment anyway. (closes: #764564)
* debian/askpas.c: fix systemd_read() to really strip trailing newline from
input. Thanks to Quentin Lefebvre for report and patch. (closes: #768407)
cryptsetup (2:1.6.6-3) unstable; urgency=medium
* debian/initramfs/cryptroot-script: fix environment variable $CRYPTTAB_TRIED
to hold the number of actual tries instead of the number of maximum tries.
Thanks to Luc Maisonobe for debugging and the patch. (closes: #758788)
cryptsetup (2:1.6.6-2) unstable; urgency=medium
* rename 'luksheader' option in crypttab to 'header', as it may be used for
different encryption modes later as well.
* add support for detached LUKS header to initramfs scripts. Thanks to Pablo
Santiago for the hint and DiagonalArg from Launchpad for patch suggestions.
(closes: #716652)
* fix support for truecrypt devices in initramfs scripts. Thanks to Lukas
Wunner for the patch. (closes: #748286)
* use blkid instead of fstype everywhere in cryptroot initramfs scripts.
Thanks to Pablo Santiago for the hint.
* debian/initramfs/cryptroot-hook: add support for 'initramfs' option to
crypttab. Thanks to Hugh Davenport for the patch. (closes: #697162)
* debian/initramfs/cryptroot-script: add support for multiple btrfs root
devices. This should fix the WARNING at mkinitramfs for unencrypted
btrfs root device(s) as well. Thanks to Jon Severinsson and Gerald Turner
for patches. (closes: #682751, #762268)
* debian/initramfs/cryptroot-script: skip missing device in initramfs after
dropping to the panic/emergency shell instead of looping in the panic
shell. Thanks to Cédric Barboiron for the patch. (closes: #762573)
* debian/initramfs/cryptroot-script: for LVM devices, don't set ROOT to
$NEWROOT in /etc/param.conf in case that /etc/param.conf already has ROOT
set. This is the case for flash-kernel devices. Thanks to Brandon Parker
for bugreport and patch. (closes: #759720)
* debian/initramfs/cryptroot-script: in slumber loop, retry vg_activate
every ten seconds. Fixes LVM on USB in cases that the USB device didn't
come up fast enough. (closes: #762032)
* fix package version number in debian/NEWS.
* bump standards-version to 3.9.6, no changes needed.
cryptsetup (2:1.6.6-1) unstable; urgency=medium
* new upsream version 1.6.6.
* add versioned dependency on cryptsetup-bin to cryptsetup. (closes: #747670)
* change versioned build-depends on automake to >= 1.12 to reflect upstream
requirements. Thanks to Joel Johnson. (closes: #740688)
* build and link against libgcrypt20 (>= 1.6.1). Add note about whirlpool
bug in older libgcrypt releases and how to deal with it to debian/NEWS.
* add systemd support to askpass. Thanks to David Härdeman for the patch.
(closes: #742600, #755074)
* fix initramfs cryptroot hook to not include modules unconditionally. Thanks
to Dmitrijs Ledkovs for bugreport and patch. (closes: #714104)
* fix decrypt_keyctl script to ask again in case of wrong passphrase. Thanks
to Dmitriy Matrosov for bugreport and patch. (closes: #748368)
* incorporate changes from ubuntu package:
- don't hardcode paths to udevadm and udevsettle.
- restore terminal settings in askpass.c. (closes: #714942)
- migrate upstart jobs to new names.
cryptsetup (2:1.6.4-4) unstable; urgency=medium
* really fix plain device opening in initramfs cryptroot script this time.
Thanks again to Dirk Griesbach for the patch. (closes: #740592)
cryptsetup (2:1.6.4-3) unstable; urgency=medium
* fix plain device opening, broken by switch to new unified open command
in 1.6.4-1. Thanks to Dirk Griesbach for the patch. (closes: #740592)
* update italian debconf translations, thanks to Italian l10n team and
Francesca Ciceri. (closes: #740557)
* remove trailing whitespaces from text files.
* some minor packaging fixes thanks to lintian checks:
- fix VCS-* fields in debian/control to use canoncial URIs.
- remove empty directory from libcryptsetup4 package.
- add lintian-override for init.d-script-not-included-in-package.
cryptsetup (2:1.6.4-2) unstable; urgency=medium
* fix libcryptsetup.so symlink. Thanks to Michael Biebl. (closes: #740484)
cryptsetup (2:1.6.4-1) unstable; urgency=low
* new upstream version 1.6.4.
- minor fixes in cryptsetup manpage. (closes: #725131)
- by default verify new passphrase in luksChangeKey and luksAddKey
commands (closes: #728302)
- cryptsetup releases are released on kernel.org since 1.6.4. Change
debian/watch accordingly.
* use compiled defaults for cypher, keysize and hash in luksformat script
* improvements to docs (thanks to Christoph Anton Mitterer):
- small improvement to explanation for CRYPTTAB_TRIED environment variable
in crypttab manpage
- update cipher, size and hash settings in examples (closes: #714331)
- replace '/dev/hdX' devices with '/dev/sdX' in examples
- full path to keyscripts in /lib/cryptsetup/scripts not needed in examples
* update init and initramfs scripts to use new open syntax (closes: #714395)
* add scripts/local-block/cryptroot in order to support event based block
device handling. Thanks to Goswin von Brederlow (closes: #678692)
* add support for TCRYPT device handling to cryptdisks init and cryptroot
initramfs scripts. (closes: #722509)
* improve passphrase prompt in cryptroot initramfs script. Thanks to Joachim
Breitner. (closes: #728080)
* add support for detached luks header to cryptdisks init script. Thanks to
Ximin Luo. (closes: #716652)
* enhance docs about remote unlocking feature. Thanks to Karl O. Pinc.
(closes: #715487, #714952)
* update README.keyctl docs: since linux kernel 2.6.38, dm-crypt is not
single-threaded any longer. (closes: #714806)
* don't sleep between retries in cryptroot initramfs script. (closes: #715525)
* add multi-arch support. Thanks to Shawn Landden. (closes: #696008, #732099)
* suggest keyutils. Thanks to Nikolaus Rath. (closes: #734133, #735496)
* fix initramfs/cryptroot-hook to support more than one lvm source devices.
Thanks to Jens Reinsberger for the patch. (closes: #659688, #737686)
* bump standards-version to 3.9.5, no changes needed.
* override lintian false positives for init scripts:
- init.d-script-does-not-implement-optional-option status
- init.d-script-does-not-source-init-functions
Date: Tue, 07 Jul 2015 16:58:45 +0100
Changed-By: Andy Whitcroft <apw at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/cryptsetup/2:1.6.6-5ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 07 Jul 2015 16:58:45 +0100
Source: cryptsetup
Binary: cryptsetup cryptsetup-bin libcryptsetup4 libcryptsetup-dev cryptsetup-udeb libcryptsetup4-udeb
Architecture: source
Version: 2:1.6.6-5ubuntu1
Distribution: wily
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andy Whitcroft <apw at ubuntu.com>
Description:
cryptsetup - disk encryption support - startup scripts
cryptsetup-bin - disk encryption support - command line tools
cryptsetup-udeb - disk encryption support - commandline tools (udeb) (udeb)
libcryptsetup-dev - disk encryption support - development files
libcryptsetup4 - disk encryption support - shared library
libcryptsetup4-udeb - disk encryption support - shared library (udeb) (udeb)
Closes: 659688 678692 682751 696008 697162 714104 714331 714395 714806 714942 714952 715487 715525 716652 722509 725131 728080 728302 732099 734133 735496 737686 740484 740557 740592 740688 742600 747670 748286 748368 755074 758788 759720 762032 762268 762573 764564 767832 768407 773456
Changes:
cryptsetup (2:1.6.6-5ubuntu1) wily; urgency=low
.
* Merge from Debian unstable. Remaining changes:
- debian/control:
+ Bump initramfs-tools Suggests to Depends: so system is not
potentially rendered unbootable.
+ Depend on plymouth.
+ Invert the "busybox | busybox-static" Recommends, as the latter
is the one we ship in main as part of the ubuntu-standard task.
+ Drop explicit libgcrypt11 dependency from libcryptsetup4.
* Dropped changes, now in Debian:
- Remove hardcoded paths to udevadm.
- debian/initramfs/cryptroot-hook:
+ Do not unconditionally include cryptsetup utils in the initramfs.
+ Do not include any modules or utils in the initramfs, unless
rootfs/resume devices are encrypted or CRYPTSETUP is set to 'y' in
the initramfs.conf configuration file.
- debian/cryptsetup.maintscripts:
+ Migrate upstart jobs to new names.
.
cryptsetup (2:1.6.6-5) unstable; urgency=high
.
* debian/cryptdisks.functions: fix the precheck for ubuntu+upstart
before invoking 'status cryptdisks-udev'. (closes: #773456)
* debian/cryptdisks.functions: fix the insufficient grep regex for
detecting a running cryptdisks-udev (upstart) init script.
.
cryptsetup (2:1.6.6-4) unstable; urgency=medium
.
[ Simon McVittie ]
* debian/initramfs/cryptroot-script: decrypt /usr as well as / so that
split-/usr will work with initramfs-tools (>= 0.118). (closes: #767832)
.
[ Jonas Meurer ]
* debian/cryptdisks.funcctions: check for cryptdisks-udev initscript before
actually invoking 'status' on it. It's only useful in ubuntu+upstart
environment anyway. (closes: #764564)
* debian/askpas.c: fix systemd_read() to really strip trailing newline from
input. Thanks to Quentin Lefebvre for report and patch. (closes: #768407)
.
cryptsetup (2:1.6.6-3) unstable; urgency=medium
.
* debian/initramfs/cryptroot-script: fix environment variable $CRYPTTAB_TRIED
to hold the number of actual tries instead of the number of maximum tries.
Thanks to Luc Maisonobe for debugging and the patch. (closes: #758788)
.
cryptsetup (2:1.6.6-2) unstable; urgency=medium
.
* rename 'luksheader' option in crypttab to 'header', as it may be used for
different encryption modes later as well.
* add support for detached LUKS header to initramfs scripts. Thanks to Pablo
Santiago for the hint and DiagonalArg from Launchpad for patch suggestions.
(closes: #716652)
* fix support for truecrypt devices in initramfs scripts. Thanks to Lukas
Wunner for the patch. (closes: #748286)
* use blkid instead of fstype everywhere in cryptroot initramfs scripts.
Thanks to Pablo Santiago for the hint.
* debian/initramfs/cryptroot-hook: add support for 'initramfs' option to
crypttab. Thanks to Hugh Davenport for the patch. (closes: #697162)
* debian/initramfs/cryptroot-script: add support for multiple btrfs root
devices. This should fix the WARNING at mkinitramfs for unencrypted
btrfs root device(s) as well. Thanks to Jon Severinsson and Gerald Turner
for patches. (closes: #682751, #762268)
* debian/initramfs/cryptroot-script: skip missing device in initramfs after
dropping to the panic/emergency shell instead of looping in the panic
shell. Thanks to Cédric Barboiron for the patch. (closes: #762573)
* debian/initramfs/cryptroot-script: for LVM devices, don't set ROOT to
$NEWROOT in /etc/param.conf in case that /etc/param.conf already has ROOT
set. This is the case for flash-kernel devices. Thanks to Brandon Parker
for bugreport and patch. (closes: #759720)
* debian/initramfs/cryptroot-script: in slumber loop, retry vg_activate
every ten seconds. Fixes LVM on USB in cases that the USB device didn't
come up fast enough. (closes: #762032)
* fix package version number in debian/NEWS.
* bump standards-version to 3.9.6, no changes needed.
.
cryptsetup (2:1.6.6-1) unstable; urgency=medium
.
* new upsream version 1.6.6.
* add versioned dependency on cryptsetup-bin to cryptsetup. (closes: #747670)
* change versioned build-depends on automake to >= 1.12 to reflect upstream
requirements. Thanks to Joel Johnson. (closes: #740688)
* build and link against libgcrypt20 (>= 1.6.1). Add note about whirlpool
bug in older libgcrypt releases and how to deal with it to debian/NEWS.
* add systemd support to askpass. Thanks to David Härdeman for the patch.
(closes: #742600, #755074)
* fix initramfs cryptroot hook to not include modules unconditionally. Thanks
to Dmitrijs Ledkovs for bugreport and patch. (closes: #714104)
* fix decrypt_keyctl script to ask again in case of wrong passphrase. Thanks
to Dmitriy Matrosov for bugreport and patch. (closes: #748368)
* incorporate changes from ubuntu package:
- don't hardcode paths to udevadm and udevsettle.
- restore terminal settings in askpass.c. (closes: #714942)
- migrate upstart jobs to new names.
.
cryptsetup (2:1.6.4-4) unstable; urgency=medium
.
* really fix plain device opening in initramfs cryptroot script this time.
Thanks again to Dirk Griesbach for the patch. (closes: #740592)
.
cryptsetup (2:1.6.4-3) unstable; urgency=medium
.
* fix plain device opening, broken by switch to new unified open command
in 1.6.4-1. Thanks to Dirk Griesbach for the patch. (closes: #740592)
* update italian debconf translations, thanks to Italian l10n team and
Francesca Ciceri. (closes: #740557)
* remove trailing whitespaces from text files.
* some minor packaging fixes thanks to lintian checks:
- fix VCS-* fields in debian/control to use canoncial URIs.
- remove empty directory from libcryptsetup4 package.
- add lintian-override for init.d-script-not-included-in-package.
.
cryptsetup (2:1.6.4-2) unstable; urgency=medium
.
* fix libcryptsetup.so symlink. Thanks to Michael Biebl. (closes: #740484)
.
cryptsetup (2:1.6.4-1) unstable; urgency=low
.
* new upstream version 1.6.4.
- minor fixes in cryptsetup manpage. (closes: #725131)
- by default verify new passphrase in luksChangeKey and luksAddKey
commands (closes: #728302)
- cryptsetup releases are released on kernel.org since 1.6.4. Change
debian/watch accordingly.
* use compiled defaults for cypher, keysize and hash in luksformat script
* improvements to docs (thanks to Christoph Anton Mitterer):
- small improvement to explanation for CRYPTTAB_TRIED environment variable
in crypttab manpage
- update cipher, size and hash settings in examples (closes: #714331)
- replace '/dev/hdX' devices with '/dev/sdX' in examples
- full path to keyscripts in /lib/cryptsetup/scripts not needed in examples
* update init and initramfs scripts to use new open syntax (closes: #714395)
* add scripts/local-block/cryptroot in order to support event based block
device handling. Thanks to Goswin von Brederlow (closes: #678692)
* add support for TCRYPT device handling to cryptdisks init and cryptroot
initramfs scripts. (closes: #722509)
* improve passphrase prompt in cryptroot initramfs script. Thanks to Joachim
Breitner. (closes: #728080)
* add support for detached luks header to cryptdisks init script. Thanks to
Ximin Luo. (closes: #716652)
* enhance docs about remote unlocking feature. Thanks to Karl O. Pinc.
(closes: #715487, #714952)
* update README.keyctl docs: since linux kernel 2.6.38, dm-crypt is not
single-threaded any longer. (closes: #714806)
* don't sleep between retries in cryptroot initramfs script. (closes: #715525)
* add multi-arch support. Thanks to Shawn Landden. (closes: #696008, #732099)
* suggest keyutils. Thanks to Nikolaus Rath. (closes: #734133, #735496)
* fix initramfs/cryptroot-hook to support more than one lvm source devices.
Thanks to Jens Reinsberger for the patch. (closes: #659688, #737686)
* bump standards-version to 3.9.5, no changes needed.
* override lintian false positives for init scripts:
- init.d-script-does-not-implement-optional-option status
- init.d-script-does-not-source-init-functions
Checksums-Sha1:
00e1acd72b8261bfe17e7d312cb9ed96a59f37f1 2660 cryptsetup_1.6.6-5ubuntu1.dsc
2e7a045cc88491df4f08e0f4023c15fcbdf170d6 1145940 cryptsetup_1.6.6.orig.tar.xz
5a9d30e758763c9de48778cfc01df9244284dad0 91040 cryptsetup_1.6.6-5ubuntu1.debian.tar.xz
Checksums-Sha256:
c6ccd68ba06d98dce67c0ce49d0c9856873e72b2c8643ddb11332302da38240a 2660 cryptsetup_1.6.6-5ubuntu1.dsc
2d2ce28e4e1137dd599d87884b62ef6dbf14fd7848b2a2bf7d61cf125fbd8e6f 1145940 cryptsetup_1.6.6.orig.tar.xz
aaffab8eda1bec3e3fac0f8b8b610205cc307a4c57cb3fccdb28b2be48ea81e7 91040 cryptsetup_1.6.6-5ubuntu1.debian.tar.xz
Files:
0fd4129c616672bbd517634ae05e2392 2660 admin optional cryptsetup_1.6.6-5ubuntu1.dsc
179c0781de59838a4e39f61b2df5ea48 1145940 admin optional cryptsetup_1.6.6.orig.tar.xz
c614848c4e7d3a3bada1344eae9dcafd 91040 admin optional cryptsetup_1.6.6-5ubuntu1.debian.tar.xz
Original-Maintainer: Debian Cryptsetup Team <pkg-cryptsetup-devel at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=svpm
-----END PGP SIGNATURE-----
More information about the Wily-changes
mailing list