Re: [dm-crypt] LUKS FAQ separate for LUKS1/LUKS2, or combined? Was: cryptsetup Yubikey challenge-response support

["Michael Kjörling" <michael@kjorling.se>]

On 12 Apr 2020 00:23 +0200, from arno@wagner.name (Arno Wagner):
> @everybody: What are the preferences: Separate LUKS 2 FAQ or 
> section in the existing FAQ? 

LUKS is LUKS. Most of the concepts are similar. Most of the problems
LUKS (1 and 2) solve are similar.

Yes, some _answers_ might well be different for LUKS 1 or LUKS 2. But
the _questions_ should be mostly the same, and _why_ to do one thing
or another should be similar. The only obvious exception to that which
I can think of is where something is _possible_ in LUKS 2, but simply
not possible in LUKS 1, _and_ that would be worthy of inclusion in a
FAQ in the first place.

There's already parts in the FAQ that discuss dm-crypt, RAM,
passphrases, erasing data, and so on; so there's ample precedent that
the FAQ already covers more than LUKS (1) proper.

Therefore, in the name of consistency and ease of reading, I would
suggest to keep it all in one document, _but_ clearly mark the parts
that only apply to one or the other. (This could be whole Q/A tuples,
or just a portion such as an example command line.) Also perhaps add
something near the top for how to tell based on an existing container,
ideally irrespective of how the distribution does things, whether a
LUKS container is LUKS 1 or LUKS 2.

-- 
Michael Kjörling • https://michael.kjorling.se • michael@kjorling.se
 “Remember when, on the Internet, nobody cared that you were a dog?”