Hi all

I have installed libgcrypt as described in the BLFS and it generally works fine.

When I later installed cryptsetup (from https://gitlab.com/cryptsetup/cryptsetup), I realized it was using gcrypt.

The thing now is: lfs suggests quite consistently to put libraries and binaries used for early boot stuff in /lib, /bin and /sbin. If cryptsetup is used in early boot, to mount an encrypted /usr for instance, this would fail, as libgcrypt and libgpg-error lie on /usr.

So, it might be advisable to add the commands to move that stuff to /lib.

In consistency with Bruce's lfs commands this would be for gcrypt:

mv -v /usr/lib/libgcrypt.so.* /lib
ln -sf ../../lib/$(readlink /usr/lib/libgcrypt.so) /usr/lib/libgcrypt.so


and for gpg-error:

mv -v /usr/lib/libgpg-error.so.* /lib
ln -sf ../../lib/$(readlink /usr/lib/libgpg-error.so) /usr/lib/libgpg-error.so

The bin stuff could stay on /usr, as it won't be needed in early boot.

On a minor note: It could be mentioned that adding "--with-capabilities" to configure will produce a gcrypt library that ultimately will prevent cryptsetup from handling plain dm-crypt devices. Took me quite a while to find out....
--
http://lists.linuxfromscratch.org/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to