[arch-general] [arch-dev-public] removing cryptsetup from base group

Thorsten Töpper atsutane at freethoughts.de
Tue Aug 9 13:09:08 EDT 2011


On Tue, 9 Aug 2011 17:42:32 +0200
Lukas Fleischer <archlinux at cryptocrack.de> wrote:

> On Tue, Aug 09, 2011 at 03:37:15PM +0300, Ionut Biru wrote:
> > Hi,
> > 
> > this package brings in our clean chroots libgcrypt dependency.
> > 
> > Until recently, gnutls had libcrypt as dependency but now it relies
> > on nettle. That means that packages  linked to gnutls and relied on
> > libgcrypt dependency from it, will be broken.
> > 
> > We have a gnutls 3.0.0 rebuild in progress in staging and because
> > libgcrypt is in our clean chroots, everything is fine, functionality
> > wise but I noticed that we skipped adding ligcrypt to dependency
> > mostly because namcap and us assume that everybody have base group
> > installed.
> > 
> > Please check your packages to see if they link to libgcrypt and add
> > it to dependency if they do.
> 
> -1 to removing cryptsetup from base. Note that cryptsetup is an
> essential tool for setups with system encryption enabled and is
> required during boot time. It should also stay on our CDs (not only
> as available package but also installed on the root-image to allow
> for using the CD as a Live CD, even if partitions are encrypted; AIF
> probably depends on it as well). Additionally, removing cryptsetup
> from base will require users to install it manually when using
> mkinitcpio's "encrypt" hook. If you decide to remove it anyway, keep
> in mind to:
> 
> * Keep it on our Live CDs.
> 
> * Add a note to our default "/etc/mkinitcpio.conf".
> 
> * Maybe also add some note in AIF.

I agree with Lukas and support his arguments so another -1 for removing
the package from the base group.

-- 
Jabber: atsutane at freethoughts.de Blog: http://atsutane.freethoughts.de/
GPG-Key: 295AFBF4 FP: 39F8 80E5 0E49 A4D1 1341 E8F9 39E4 F17F 295A FBF4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 222 bytes
Desc: not available
URL: <http://mailman.archlinux.org/pipermail/arch-general/attachments/20110809/4dd7cb7e/attachment.asc>


More information about the arch-general mailing list