maas images lack enough of crypto for cryptsetup in the ephemeral images

Bug #1818876 reported by Dimitri John Ledkov on 2019-03-06
This bug affects 1 person
Affects Status Importance Assigned to Milestone

Bug Description

maas images lack enough of crypto for cryptsetup in the ephemeral images.

in cosmic and up, cryptsetup package got split into cryptsetup and cryptsetup-initramfs. For curtin/maas/subiquity to use full disc encryption, zkey, install into encrypted partition (luksOpen), we need to have lots of crypto modules in the ephemeral environment. The initramfs hook that used to copy the needed crypto modules got move from the cryptsetup package into the new cryptsetup-initramfs package. Thus I believe this package needs to be now installed, when building ephemeral environments for cosmic and up.

I will try to create a patch, however I have little knowledge as to how the maas-images code works, so will need hand-holding with that potentially.

Related branches

Dimitri John Ledkov (xnox) wrote :

Still not enough, as cryptsetup doesn't include anything in the initrd, if there are no crypto mount points available. Trying to fix this harder.

Ryan Harper (raharper) wrote :

I see one of the two branches merged? is this fix? what else are we waiting on?

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers