Re: [PATCH] 90crypt: keys on external devices support

["Amadeusz Żołnowski" <aidecoe-2qtfh70TtYba5EbDDlwbIw@public.gmane.org>]

[-- Attachment #1: Type: text/plain, Size: 2078 bytes --]

Excerpts from Mr Dash Four's message of Fri Oct 22 13:50:32 +0200 2010:
> >> I am using dracut-006 (I think - the last which comes out of FC13 
> >> repository) and currently I have to specify rd_LUKS_UUID=luks-<UUID> in 
> >> order to make it work, which is not very convenient.
> >>     
> >
> > Much have changed in dracut-007, a bit changed in git repo, and more
> > will change soon, so track and use git/repo. :-)  You might be
> > interested in my current work <http://github.com/aidecoe/dracut> where
> > things go first before reaching Harald's official Dracut repo:
> >
> >   git://dracut.git.sourceforge.net/gitroot/dracut/dracut
> >   
> It turns out that I am actually on dracut-005-3.fc13.noarch 
> (dracut-tools-005-3.fc13.noarch), which is even worse - that is the 
> 'latest' version which comes out of FC13 repositories.

Switch to git version.  Don't be afraid.  It's quite stable. :-)


> I've spend a bit of time looking through the various files dracut 
> uses/generates and have a query: there is a group of scripts in the 
> 50plymouth directory which also deals with encrypted partitions, so 
> which one takes precedence (I presume plymouth as it has a lower number, 
> is that right?)? If I modify/enhance the scripts in 90crypt would that 
> be futile as plymouth will already be done with it?

This was a problem.  It was solved by  Matt Smith some time ago, but
after 007 release, so again… see git version. :-)


> One other alternative is to build a stripped-down version of the tool I 
> need, which implements just a single function: reads a specified token 
> from the smartcard (log in, specifying the card PIN, if necessary), 
> display it on the console and exit. This way, some/most of the 
> dependencies which currently exist may not be needed and installation 
> can proceed. I've posted on the dev forum to see if this can be done, so 
> fingers crossed!

Maybe there's already such simplified tool?
--
Amadeusz Żołnowski

PGP key fpr: C700 CEDE 0C18 212E 49DA  4653 F013 4531 E1DB FAB5

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 490 bytes --]