Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-11 Thread David Härdeman
On Tue, 10 Jul 2012 16:25:50 +0200, Lennart Poettering lenn...@poettering.net wrote: On Tue, 10.07.12 10:35, David Härdeman (da...@hardeman.nu) wrote: Whenever a user comes up with another scheme for storing keys (you've already seen some...like storing keys between the MBR and first partition

Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-11 Thread Alexander E. Patrakov
2012/7/10 Lennart Poettering lenn...@poettering.net: Well, but if this is all dependent on some other hw then the synchronous nature of keyscript= doesn't work anyway... (see other mail about that) From a user point of view it is of course additional flexibility which is the usecase. I've

Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-10 Thread David Härdeman
On Mon, Jul 09, 2012 at 10:49:56PM +0200, Lennart Poettering wrote: On Fri, 29.06.12 00:56, David Härdeman (da...@hardeman.nu) wrote: Debian's cryptsetup package supports the keyscript= option in /etc/crypttab This patch is a first attempt at implementing support for the same option in

Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-10 Thread Lennart Poettering
On Tue, 10.07.12 10:35, David Härdeman (da...@hardeman.nu) wrote: I wonder what the precise usecases for this are, and whether we can't find better solutions for these usecases... I originally implemented the keyscript= support in Debian, and the way I see it there are two different

Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-10 Thread Frederic Crozat
Le mardi 10 juillet 2012 à 16:25 +0200, Lennart Poettering a écrit : 3) systemd specific solution Converting keyscript= scripts to password agents introduce a strong dependency on systemd. I realize that you don't consider it to be a problem but I'm guessing it wouldn't be acceptable

Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-10 Thread Lennart Poettering
On Tue, 10.07.12 17:07, Frederic Crozat (fcro...@suse.com) wrote: Le mardi 10 juillet 2012 à 16:25 +0200, Lennart Poettering a écrit : 3) systemd specific solution Converting keyscript= scripts to password agents introduce a strong dependency on systemd. I realize that you don't

Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-09 Thread Lennart Poettering
On Fri, 29.06.12 00:56, David Härdeman (da...@hardeman.nu) wrote: Debian's cryptsetup package supports the keyscript= option in /etc/crypttab This patch is a first attempt at implementing support for the same option in systemd. It is not at exact feature parity yet (environment variables

Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-09 Thread Lennart Poettering
On Mon, 09.07.12 23:14, Tollef Fog Heen (tfh...@err.no) wrote: ]] Lennart Poettering I wonder what the precise usecases for this are, and whether we can't find better solutions for these usecases... I mean, we already have the password agent logic, that is asynchronous, and way more

Re: [systemd-devel] [PATCH] add keyscript support to cryptsetup

2012-07-09 Thread Tollef Fog Heen
]] Lennart Poettering On Mon, 09.07.12 23:14, Tollef Fog Heen (tfh...@err.no) wrote: ]] Lennart Poettering I wonder what the precise usecases for this are, and whether we can't find better solutions for these usecases... I mean, we already have the password agent logic, that