[arch-projects] [initscripts][RFC] cryptsetup: deprecate old syntax and default to the systemd one

Tom Gundersen teg at jklm.no
Sat Jul 28 18:09:18 EDT 2012


On Sat, Jul 28, 2012 at 11:18 PM, Heiko Baums <lists at baums-on-web.de> wrote:
>> That's the intention. There might of course be regressions, I'm
>> looking into that now.
>
> So, it was a bug or at least something that should be fixed if the size
> has to be converted from byte to bit.

Thanks to Heiko for bringing this up, and everyone else for their
helpful comments. I think I now understand the situation. This is, as
far as I can tell, not a bug. However, contrary to what I thought,
this use-case is not yet covered by the new format.

This has been said by others, but just to make sure I get this right:

The size= parameter gives the key size in bits, and there is no
parameter to specify the keyfile size.

When using PLAIN encryption, the keyfile size (in bytes) is calculated
from the key size. However, on LUKS encryption this is (obviously) not
possible, which is what I had not noticed until now.

I suspect that what we need to do is to add a keyfile-size= parameter.
It might be possible to overload the size= parameter to do the job,
but I don't think that's a good idea (especially as the units would
differ depending on the use).

>> Keep your snarky comments to yourself.
>
> Well, that depends.

No, it really does not. Everyone's just trying to help.

-t


More information about the arch-projects mailing list