On Jul 28, 2012 3:36 PM, "Heiko Baums" <lists@baums-on-web.de> wrote:
Am Sat, 28 Jul 2012 13:02:38 +0200 schrieb Tom Gundersen <teg@jklm.no>:
Could you please include the old and the new syntax you use so I can understand the problem?
The old syntax: home /dev/sdaX /dev/usbkey:15675879:1024
The new syntax: home /dev/sdaX /dev/usbkey size=1024,keyfile-offset=15675879
The old syntax and the cryptsetup handling of initscripts, most part of which I have written, btw., just works.
The new syntax and the cryptsetup handling of systemd does not.
Please double check that the units are correct in your new file.
See the /dev*) part in do_unlock_legacy(), and there particularly the *) part. This is what I need.
The key file is never written anywhere.
Are you sure? How is the key read and passed to cryptsetup? This usually has to be done by entering the password manually or by passing a key file. So if a key is read by dd it has to be written to a temporary file, which then can passed to cryptsetup. And for security reasons this temp file should first be overwritten and then deleted directly after the container is opened.
Heiko