FFe: gnome functional depends on cryptsetup, but not in package management

[Dominik Holler]

Binary package hint: cryptsetup

If you plug an LUKS encrypted media on plain ubuntu 8.04 install, gnome is asking for an password, and then reports that the volume can not accessed because cryptsetup is not installed. Maybe gnome could ask to install cyptsetup, or set cryptsetapt as dependency for the gnome package ?

[Reinhard Tartler (siretart)]

clearly not a problem in the cryptsetup package itself.

[Dominik Holler (dominik-holler)]

still in daily-live of 10.04

[Martin Pitt (pitti)]

It would be fine for udisks to recommend it, but before we do that it needs to be split. We'd actually like to have the cryptsetup program in the default install, but not all the initramfs scripts for booting from an encrypted drive (as they slow down and complicate the boot process).

So if we could split off a cryptsetup-bin with the /sbin/ and /lib parts, and leave the boot integration in the "cryptsetup" package, I'm happy to add a recommends. This should preferably be done in Debian then.

[Jean-Louis Dupond (dupondje)]

Attached a patch that splits cryptsetup into cryptsetup & crypsetup-bin.
With the -bin package only containing cryptsetup itself and no startup scripts or initramfs hooks.

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "split.debdiff" of this bug report has been identified as being a patch in the form of a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-sponsors team please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]

[Martin Pitt (pitti)]

The cryptsetup split does not change any actual functionality, so appoving that part, and sponsoring. I'll take care of the binNEWing.

[Martin Pitt (pitti)]

Jean-Louis, thanks for the patch! There were a few missing things, luksformat, the manpages, all the gettext files need to go into -bin, and cryptsetup-bin needs to Replaces:/Breaks: cryptsetup, and the new Breaks: in cryptsetup was unnecessary. If you push this to Debian, please use this patch and adjust the breaks/replaces version numbers accordingly.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cryptsetup - 2:1.4.1-2ubuntu2

---------------
cryptsetup (2:1.4.1-2ubuntu2) precise; urgency=low

  * Split up package in cryptsetup and cryptsetup-bin. (LP: #343363).
  * Do not overwrite existing filesystems when creating swap (LP: #474258).
  * Add aesni module when we have hardware encryption.
 -- Jean-Louis Dupond <email address hidden> Mon, 12 Mar 2012 10:14:30 +0100

[Martin Pitt (pitti)]

As for the new recommends to udisk, that's the actual new feature, i. e. supporting the creation and mounting of encrypted media by default. Arguably this could be considered a bug fix, as all the UI is already there and it just doesn't work out of the box. It seems safe enough for me, but I'd appreciate a second opinion from a release team member.

[Martin Pitt (pitti)]

Jonathan +1'ed this as well.

[Launchpad Janitor (janitor)]

This bug was fixed in the package udisks - 1.0.4-3ubuntu1

---------------
udisks (1.0.4-3ubuntu1) precise; urgency=low

  * debian/control: Change the "cryptsetup" suggests to a "cryptsetup-bin"
    recommends, so that LUKS functionality works by default. This change needs
    to be kept in Ubuntu until the cryptsetup package split goes into Debian
    as well. (LP: #343363)
 -- Martin Pitt <email address hidden> Tue, 13 Mar 2012 09:57:01 +0100

[Ego (egogratis)]

Thank you for fixing this bug.

https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/651730