On Sun, Jul 29, 2012 at 12:09 AM, Tom Gundersen <teg@jklm.no> wrote:
Thanks to Heiko for bringing this up, and everyone else for their helpful comments. I think I now understand the situation. This is, as far as I can tell, not a bug. However, contrary to what I thought, this use-case is not yet covered by the new format.
This has been said by others, but just to make sure I get this right:
The size= parameter gives the key size in bits, and there is no parameter to specify the keyfile size.
When using PLAIN encryption, the keyfile size (in bytes) is calculated from the key size. However, on LUKS encryption this is (obviously) not possible, which is what I had not noticed until now.
I suspect that what we need to do is to add a keyfile-size= parameter.
FYI, this was just added upstream: <http://lists.freedesktop.org/archives/systemd-devel/2012-August/006099.html>. -t