[ Adding cryptsetup maintainer to the loop. ] Hi,
Darshaka Pathirana <d...@syn-net.org> (2019-07-01): > Just a quick note. Thanks for the feedback. > On 6/26/19 7:49 PM, Cyril Brulebois wrote: > > The Debian Installer team[1] is pleased to announce the second release > > candidate of the installer for Debian 10 "Buster". > > > > > > Improvements in this release > > ============================ > > > > * choose-mirror:Hi > > - Update Mirrors.masterlist. > > * cryptsetup: > > - New section “Unlocking LUKS devices from GRUB” pointing to: > > > > https://cryptsetup-team.pages.debian.net/cryptsetup/encrypted-boot.html > > The guide states the following: > > ,---- > | But as of Buster cryptsetup(8) defaults to a new LUKS header format > | version, which isn’t supported by GRUB as of 2.04. Hence the > | pre-Buster workarounds won’t work anymore. > `---- > > But looking at cryptsetup(8)[1], it is not mentioned that luks2 > is default, in fact it seems to tell the opposite: > > [1] https://manpages.debian.org/testing/cryptsetup-bin/cryptsetup.8.en.html > > ,---- > | LUKS2 is a new version of header format that allows additional extensions > like > | different PBKDF algorithm or authenticated encryption. You can format device > | with LUKS2 header if you specify --type luks2 in luksFormat command. For > | activation, the format is already recognized automatically. > `---- > [2] https://gitlab.com/cryptsetup/cryptsetup/blob/master/man/cryptsetup.8#L241 > > and > > ,---- > | To use LUKS2, specify --type luks2. > `---- > [3] https://gitlab.com/cryptsetup/cryptsetup/blob/master/man/cryptsetup.8#L278 That doesn't say much about the default setting; but I can see how one could read it as “this is not the default”. > Is the guide wrong or is there a (RC) bug in the man page? The guide was just written, is correct; and a possible bug in the manpage wouldn't exactly qualify as release critical. > P.s. I am not on the list, I read this via debian-devel-announce. ACK. Cheers, -- Cyril Brulebois (k...@debian.org) <https://debamax.com/> D-I release manager -- Release team member -- Freelance Consultant
signature.asc
Description: PGP signature
