On Tue, 10 Jul 2012 16:25:50 +0200, Lennart Poettering
lenn...@poettering.net wrote:
On Tue, 10.07.12 10:35, David Härdeman (da...@hardeman.nu) wrote:
Whenever a user comes up with another scheme for storing keys (you've
already seen some...like storing keys between the MBR and first
partition
2012/7/10 Lennart Poettering lenn...@poettering.net:
Well, but if this is all dependent on some other hw then the synchronous
nature of keyscript= doesn't work anyway... (see other mail about that)
From a user point of view it is of course additional flexibility which
is the usecase. I've
On Mon, Jul 09, 2012 at 10:49:56PM +0200, Lennart Poettering wrote:
On Fri, 29.06.12 00:56, David Härdeman (da...@hardeman.nu) wrote:
Debian's cryptsetup package supports the keyscript= option in /etc/crypttab
This patch is a first attempt at implementing support for the same option
in
On Tue, 10.07.12 10:35, David Härdeman (da...@hardeman.nu) wrote:
I wonder what the precise usecases for this are, and whether we can't
find better solutions for these usecases...
I originally implemented the keyscript= support in Debian, and the way I
see it there are two different
Le mardi 10 juillet 2012 à 16:25 +0200, Lennart Poettering a écrit :
3) systemd specific solution
Converting keyscript= scripts to password agents introduce a strong
dependency on systemd. I realize that you don't consider it to be a
problem but I'm guessing it wouldn't be acceptable
On Tue, 10.07.12 17:07, Frederic Crozat (fcro...@suse.com) wrote:
Le mardi 10 juillet 2012 à 16:25 +0200, Lennart Poettering a écrit :
3) systemd specific solution
Converting keyscript= scripts to password agents introduce a strong
dependency on systemd. I realize that you don't
On Fri, 29.06.12 00:56, David Härdeman (da...@hardeman.nu) wrote:
Debian's cryptsetup package supports the keyscript= option in /etc/crypttab
This patch is a first attempt at implementing support for the same option
in systemd. It is not at exact feature parity yet (environment variables
On Mon, 09.07.12 23:14, Tollef Fog Heen (tfh...@err.no) wrote:
]] Lennart Poettering
I wonder what the precise usecases for this are, and whether we can't
find better solutions for these usecases... I mean, we already have the
password agent logic, that is asynchronous, and way more
]] Lennart Poettering
On Mon, 09.07.12 23:14, Tollef Fog Heen (tfh...@err.no) wrote:
]] Lennart Poettering
I wonder what the precise usecases for this are, and whether we can't
find better solutions for these usecases... I mean, we already have the
password agent logic, that