cryptsetup (2:1.4.1-2ubuntu1) precise; urgency=low
[ Jean-Louis Dupond ]
* Merge from debian unstable (LP: #776264), remaining changes:
- debian/cryptdisks.functions: Suppress "Starting init crypto disks" message
in "init" phase, to avoid writing over fsck progress text.
- debian/cryptroot-hook: Quiet warnings from find on arches that
don't have all the kernel/{arch,crypto} bits we're testing for.
- debian/control:
+ Bump initramfs-tools Suggests to Depends: so system is not
potentially rendered unbootable.
+ Depend on plymouth.
- Add debian/cryptdisks-{enable,udev}.upstart.
- debian/cryptdisks.functions:
+ new function, crypttab_start_one_disk, to look for the named source
device in /etc/crypttab (by device name, UUID, or label) and start it
if configured to do so
- debian/cryptdisks{,-early}.init: Make the 'start' action of the init
script a no-op, this should be handled entirely by the upstart job;
and fix the LSB header to not declare this should be started in
runlevel 'S'
- debian/rules:
+ Do not install start symlinks for init scripts, and
install debian/cryptdisks-{enable,udev}.upstart scripts.
[ Steve Langasek ]
* debian/cryptdisks.functions: handle the case where crypttab contains a
name for the source device that is not the kernel's preferred name for
it (as is the case for LVs).
cryptsetup (2:1.4.1-2) unstable; urgency=low
* acknowledge NMU. Thanks to Michael Biebl. (closes: #659182)
* don't print error for non-encrypted rootfs in initramfs cryptroot hook.
Thanks to Jamie Heilman and Christoph Anton Mitterer for bugreports.
(closes: #659087, #659106)
* use dmsetup splitname to extract VG name from $node in initramfs cryptroot
hook. Thanks to Kai Weber for the bugreport, Milan Broz and Claudio
Imbrenda for suggestions and patches. (closes: #659235)
cryptsetup (2:1.4.1-1.1) unstable; urgency=low
* Non-maintainer upload.
* Fix dangling .so symlink. Don't hard code the library version but use
readlink instead to determine where the .so symlink should point at.
(closes: #659182)
cryptsetup (2:1.4.1-1) unstable; urgency=low
* new upstream release (1.4.0 + 1.4.1) (closes: #647851)
- fixes typo in german translation. (closes: #645528)
- remove patches, all incorporated upstream.
- soname bump, rename library package to libcryptsetup4
* check for busybox in initramfs cryptroot hook, and install the sed binary
in case it's either not installed or not activated. (closes: #591853)
* add checks for 'type $KEYSCRIPT' to initscripts cryptdisks.functions, and
to cryptroot initramfs script/hook. this adds support for keyscripts inside
$PATH. thanks to Ian Jackson for the suggestion. (closes: #597583)
* use argument '--sysinit' for vgchange in cryptroot initramfs script. Thanks
to Christoph Anton Mitterer for the suggestion.
* add option for discard/trim features to crypttab and initramfs scripts.
Thanks to intrigeri and Peter Colberg for patches. (closes: #648868)
* print $target on error in initramfs hook. Thanks to Daniel Hahler for the
bugreport. (closes: #648192)
* add a warning about using decrypt_derived keyscript for devices with
persistent data. Thanks to Arno Wagner for pointing this out.
* remove quotes from resume device candidates at get_resume_devs() in
initramfs hook script. Thanks to Johannes Rohr. (closes: #634017)
* support custom $TABFILE, thanks to Douglas Huff. (closes: #638317)
* fix get_lvm_deps() in initramfs cryptroot hook to add all physical volumes
of lvm volume group that contains the rootfs logical volume, even if the
rootfs is lv is not spread over all physical volumes. Thanks to Christian
Pernegger for bugreport and patch. (closes: #634109)
* debian/initramfs/cryptroot-script: Move check for maximum number of tries
behind the while loop, to make the warning appear in case that maximum
number of tries is reached. Thanks to Chistian Lamparter for bugreport and
patch. (closes: #646083)
* incorporate changes to package descriptions and debconf templates that
suggested by debian-l10n-english people. Special thanks go to Justin B Rye.
* acknowledge NMU, thanks a lot to Christian Perrier for his great work on
the i18n front. (closes: #633105, #641719, #641839, #641947, #642470,
#640056, #642540, #643633, #643962, #644853)
* add and update debconf translations:
- italian, thanks to Milo Casagrande, Francesca Ciceri. (closes: #656933)
- german, thanks to Erik Pfannenstein. (closes: #642147)
- spanish, thanks to Camaleón. (closes: #658360)
- russian, thanks to Yuri Kuzlov (closes: #654676)
* set architecture to linux-any, depends on linux kernel anyway. Thanks to
Christoph Egger. (closes: #638257)
* small updates to the copyright file.
* add targets build-indep and build-arch to debian/rules, thanks to lintian.
cryptsetup (2:1.3.0-3.1) unstable; urgency=low
* Non-maintainer upload.
* Fix pending l10n issues. Debconf translations:
- French (Julien Patriarca). Closes: #633105
- Vietnamese (Hung Tran). Closes: #641719
- Portuguese (Miguel Figueiredo). Closes: #641839
- Russian (Yuri Kozlov). Closes: #641947
- Swedish (Martin Bagge / brother). Closes: #642470,#640056
- Czech (Michal Simunek). Closes: #642540
- Dutch; (Jeroen Schot). Closes: #643633
- Spanish; (Camaleón). Closes: #643962
- Danish (Joe Hansen). Closes: #644853
cryptsetup (2:1.3.0-3) unstable; urgency=low
* drop the loopback magick from cryptdisks scripts. Mario 'Bitkoenig' Holbe
pointed out, that auto-destruction support was added to the loopback driver
with kernel 2.6.25. Given, that even lenny has a more recent kernel,
support for kernels < 2.6.25 is not required any more. (closes: #626458)
* add debconf question 'prerm/active-mappings' with priority high to prerm
maintainer script. will warn about active dm-crypt mappings before the
package is removed/purged. (closes: #626641)
* add lintian-override for 'cryptsetup: no-debconf-config', as the debconf
question in prerm doesn't require a debconf config script.
* add debian/patches/03_create_fix_keyfile.patch. (closes: #626738)
cryptsetup (2:1.3.0-2) unstable; urgency=low
* fix changelog of 2:1.3.0-1 release, thanks to Thorsten Glaser for the hint
cryptsetup (2:1.3.0-1) unstable; urgency=low
* new upstream release
- automatically allocates loopback device for container files. update the
cryptdisks functions to only setup loopback device for kernel < 2.6.35.
otherwise, let cryptsetup do the magic itself.
- introduces maximum default keyfile size, see --help for value. manually
set the keyfile size with --keyfile-size in order to overwrite the limit.
- adds luksChangeKey command for changing passphrase/keyfile in one step
- adds loopAES compatibility command loopaesOpen
- remove d/patches/01_luksAddKey_return_code.patch, incorporated upstream
* add gettext support to luksformat script. Thanks to intrigeri for initial
patch, and adduser sources for implementation ideas. (closes: #558405)
* fix KEYSCRIPT checks in cryptdisks.functions for empty values.
* update REAMDE.gnupg and initramfs cryptgnupg hook script:
- warn about keys being copied to initramfs.
- fix the documentation to provide working examples.
* update README.Debian and related documentation:
- add a section about the 'special' keyscripts askpass and passdev
(closes: #601314)
- update several sections, remove reference to lenny
* add debian/patches/01_create_fix_size.patch, to fix a regression in 1.2.0
where the size argument was ignored for create command (closes: #624828)
* add debian/patches/02_manpage.patch, escapes minus signs in manpage
* remove usplash support from cryptroot initramfs script, askpass and
keyscripts, add plymouth support to keyscripts. (closes: #620923)
* ignore options like cipher, hash, size, etc. for luks commands in
cryptdisks. mention this in the crypttab manpage. (closes: #619249)
* again check for existance of /lib/cryptsetup/cryptdisks.functions before
sourcing it in cryptdisks(-early).init. required if cryptsetup is removed
but not purged, where initscripts are still around. (closes: #625468)
* bump standards-version to 3.9.2, no changes needed.
* debian/libcryptsetup1.symbols: update, 1.3.0 adds new function symbols
cryptsetup (2:1.2.0-2) unstable; urgency=low
* upload to unstable.
* fixes a ftbfs due to updated libgpg-error and libgcrypt11 build-
dependencies. (closes: #614530)
* install cryptkeyctl initramfs hook, needed for keyctl keyscript in
initramfs, thanks to Maik Zumstrull (closes: #610750)
* use 'egrep -c' instead of wc in cryptdisks_st* scripts, wc might not be
available as it's located at /usr/bin. Thanks to Mario 'BitKoenig' Holbe
for bugreport and patch. (closes: #611747)
* add debian/patches/01_luksAddKey_return_code.patch, fixes the luksAddKey
return code when the master key is used. (closes: #610366)
* fix luksformat script to invoke usage() with --help. (closes: #612947)
* add a paragraph about known upgrade issues to the crypttab manpage. this
paragraph strongly suggests to configure cipher, hash and keysize for
plain dm-crypt devices. (closes: #612452)
* fix examples in crypttab manpage, cipher, hash and keysize should be
configured for plain dm-crypt devices.
* luksformat: invoke udevadm settle between mkfs.vfat and luksClose, to
prevent possible race conditions. This is a workaround. (closes: #601886)
* update lintian-overrides for new lintian from experimental.
* fix spelling mistake in README.Debian thanks to lintian.
* update short and long description for udebs to mention udeb and
debian-installer. This satisfies lintian.
* fix get_resume_device() in initramfs cryptroot hook script to add source
device for decrypt_derived keyscript in case it's not the root device.
Thanks to Robert Lange and mahashakti89 for bugreport. (closes: #592430)
cryptsetup (2:1.2.0-1) experimental; urgency=low
* new major upstream release (closes: #603804)
- adds text version of FAQ
- adds new options --use-random and --use-urandom for MK generation
- fixes luksRemoveKey to not ask for remaining keyslot passphrase
- no longer supports luksDelKey command (replaced by luksKillSlot)
- no longer supports reload command, dmsetup reload should be used instead
- adds support to change the UUID later (with --uuid cmd option)
- adds --dump-master-key option for luksDump command
- no luksOpen, luksFormat and create for open devices (closes: #600208)
- remove debian/patches/01_manpage.patch, incorporated upstream
- and many more changes, see upstream changelog for further information
- update debian/libcryptsetup1.symbols
* invoke update-initramfs at cryptsetup removal in order to not leave behind
a broken initramfs. thanks to ubuntu for the hint.
* link dynamically against libgcrypt11 and libgpg-error0 now that the
libraries have been moved to /lib. add versioned depends for libcryptsetup1
on (libgcrypt >= 1.4.6-2) and libgpg-error0 (>= 1.10-0.1).
* debian/initramfs/cryptroot-script: prereq 'cryptroot-prepare' added in
order to support cryptroot to depend on custom initramfs scripts. thanks
to Marc Haber for the suggestion. (closes: #601311)
* debian/cryptdisks.functions:
+ fix check for ownership and permissions of $key to work with slighly
different output of 'ls -l' with selinux enabled. (closes: #600522)
+ fix $TRIES implementation to support TRIES=0 again. (closes: #602501)
* change 'echo -e' to 'printf' in debian/initramfs/cryptroot-script. thanks
to checkbashisms script devscripts for spotting that bashism.
* add a libcryptsetup1-udeb library package for debian-installer in order to
satisfy cryptsetup-udeb dependencies with dynamically linked binary.
Version the build-depends on libgcrypt11-dev to (>= 1.4.6-3), to satisfy
udeb library dependencies.
* change 'XC-Package-Type: udeb' to 'Package-Type: udeb' in debian/control
* add debian/cryptsetup.apport from Ubuntu, install only for dist=Ubuntu.
build-depends on dpkg-dev (>= 1.15.1) is required for this to work.
-- Jean-Louis Dupond <email address hidden> Thu, 08 Mar 2012 07:32:40 +0100
