On Mon, Apr 27, 2015 at 5:42 PM, Christian Demsar <vixsomnis@fastmail.com> wrote:
I agree that the base group should be as minimal as is realistic, but I think cryptsetup belongs in base. FDE should be standard install procedure since most modern x86_64 processors have hardware accelerated AES (minimal overhead).
-- vixsomnis
If the standard install procedure meant using FDE (i.e. it was generally agreed among users that FDE is part of what defines a functional system), I would agree. How many people use FDE though? Minimal overhead is not the same as none, and a lot of people just don't care anyway -- so working on the definition that: base is anything most people wouldn't dream of doing without, I don't believe the tools for FDE should be included. Anyone who does go to the explicit effort of setting up FDE can be reasonably expected to know that they must install the right tools to do so. -- Eli Schwartz