From: "Thomas Bächler" <thomas@archlinux.org>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] Broken header of a luks-partition - more than once
Date: Tue, 25 Aug 2009 00:50:23 +0200 [thread overview]
Message-ID: <h6v5ff$e08$1@ger.gmane.org> (raw)
In-Reply-To: <4A92B7F9.7060102@redhat.com>
> spamzad@googlemail.com wrote:
>> Something must have overwritten the header (posted it at the bottom) -
>> and I have no clue what.
>> That's exactly my question now: might it be a bug in cryptsetup or can
>> i rule that out?
I have been using LUKS for several years on three different devices and
I have had many users using it for their (note|net)books. I have yet to
hear any report of breakage from my users or experience it myself.
Milan Broz schrieb:
> But see crypttab here - you have tmp device created as regular encrypted device
> with random key - are you sure that kernel _cannot_ swap sda & sdb and
> your system just formats temp device here?
>
>> # <target name> <source device> <key file> <options>
>> home /dev/sdb2 none luks
>> ctmp /dev/sda2 /dev/urandom
>> tmp,cipher=aes-cbc-essiv:sha256
>> cswap /dev/sda5 /dev/urandom
>> swap,cipher=aes-cbc-essiv:sha256
Milan is probably right here, device names on modern distributions are
not deterministic! However, the underlying script should be careful not
to the device under the random key mapping if it contains a valid
filesystem.
crypttab functionality is not part of cryptsetup, but part of your
distribution. You should report this problem there.
next prev parent reply other threads:[~2009-08-24 22:50 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-08-24 8:02 [dm-crypt] Broken header of a luks-partition - more than once spamzad
2009-08-24 15:55 ` Milan Broz
2009-08-24 22:50 ` Thomas Bächler [this message]
2009-08-24 23:10 ` Martin
[not found] ` <20090824180857.GB31701@tansi.org>
2009-08-25 3:08 ` Arno Wagner
2009-08-25 7:06 ` test532
2009-08-24 19:20 ` David Christensen
2009-08-24 20:29 ` Heinz Diehl
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='h6v5ff$e08$1@ger.gmane.org' \
--to=thomas@archlinux.org \
--cc=dm-crypt@saout.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.