Package: cryptsetup-bin Version: 2:2.1.0-2 Severity: normal Dear Maintainer,
it's no longer possible to create a container using cryptsetup
luksFormat as non-root.
Step to reproduce:
$ dd if=/dev/zero bs=16M count=1 of=/tmp/blob
$ /sbin/cryptsetup luksFormat /tmp/blob
... and an arbitrary passphrase, or shorter:
$ echo foo | /sbin/cryptsetup luksFormat /tmp/blob -
Error message:
Not compatible PBKDF options.
Running as root still succeeds - and I haven't compared the strace
output yet for time constraints, sorry.
Workaround:
Declare usage of format 1 like in
$ echo -n foo | cryptsetup luksFormat --type luks1 /tmp/blob -
and possibly some other ways.
This broke the luksmeta test suite, I've fixed that locally for the time
being but this might affect other people. I don't know whether
there's another situation where you would luksFormat as non-root (some
containerization perhaps?), so this might be release notice material as
well.
Kind regards,
Christoph
-- Package-specific info:
-- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.21 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_WARN, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect
Versions of packages cryptsetup-bin depends on:
ii libblkid1 2.33.1-0.1
ii libc6 2.28-8
ii libcryptsetup12 2:2.1.0-2
ii libpopt0 1.16-12
ii libuuid1 2.33.1-0.1
cryptsetup-bin recommends no packages.
cryptsetup-bin suggests no packages.
-- no debconf information
signature.asc
Description: PGP signature
