Curtin cannot create dmcrypt devices on precise and dmcrypt configuration syntax is not consistant with other storage entries

Bug #1611452 reported by Wesley Wiedenmeier
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
curtin
Confirmed
Wishlist
Unassigned

Bug Description

Curtin cannot create dmcrypt devices on precise because the older version of cryptsetup has a different set of flags.

Also, the configuration format for dmcrypt devices uses 'dm_name' to specify the name of a cryptsetup device, rather than 'name' as used elsewhere in storage configuration. There are many options for configuring cryptsetup that are not supported by the storage configuration format for dmcrypt devices.

Finally, there is no secure way to get a key to the installation, as currently the key must be specified in plaintext in a world readable file.

Since encryption is not used by MAAS right now, this is really low priority, but since there may be a need for this functionality at some point in the future, I'll leave a bug open to track the issues with curtin dmcrypt configuration.

Revision history for this message
Wesley Wiedenmeier (wesley-wiedenmeier) wrote :

Log showing failure to run cryptsetup on precise during storagetests

Changed in curtin:
status: New → Confirmed
Ryan Harper (raharper)
Changed in curtin:
importance: Undecided → Wishlist
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.