maas images lack enough of crypto for cryptsetup in the ephemeral images

Bug #1818876 reported by Dimitri John Ledkov
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
maas-images
Fix Released
Undecided
Unassigned

Bug Description

maas images lack enough of crypto for cryptsetup in the ephemeral images.

in cosmic and up, cryptsetup package got split into cryptsetup and cryptsetup-initramfs. For curtin/maas/subiquity to use full disc encryption, zkey, install into encrypted partition (luksOpen), we need to have lots of crypto modules in the ephemeral environment. The initramfs hook that used to copy the needed crypto modules got move from the cryptsetup package into the new cryptsetup-initramfs package. Thus I believe this package needs to be now installed, when building ephemeral environments for cosmic and up.

I will try to create a patch, however I have little knowledge as to how the maas-images code works, so will need hand-holding with that potentially.

Related branches

Revision history for this message
Dimitri John Ledkov (xnox) wrote :

Still not enough, as cryptsetup doesn't include anything in the initrd, if there are no crypto mount points available. Trying to fix this harder.

Revision history for this message
Ryan Harper (raharper) wrote :

I see one of the two branches merged? is this fix? what else are we waiting on?

Lee Trager (ltrager)
Changed in maas-images:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.