Re: [PATCH] 90crypt: keys on external devices support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Switch to git version.  Don't be afraid.  It's quite stable. :-)
I did, thank you. Compiled it as a package and found a bug in the dracut.spec file - the following 2 lines should be added, otherwise the rpm build fails:

+%{_datadir}/dracut/modules.d/95fstab-sys
+%{_datadir}/dracut/modules.d/96insmodpost

Also, building the --host initrd image was an unmitigated disaster of epic proportions!

It does not like hibernation at all - after I used hibernate and then switched the PC back on even though the 'restore' worked I've completely lost all my usb connections (mouse, keyboard and an extended hard disk) and upon reboot the kernel crashed and then as a result of that crash I had to repair the root (/) partition and restore a vital lib file, which, for some reason, was damaged and Linux won't boot without it (the entire system just died!).

Building the 'standard' dracut also has some quirks and also doesn't like hibernation, though the system 'only' crashed twice (out of 7 tests). Upon restart after hibernation, with the standard initrd (from fedora, not dracut) I normally get the system restoring itself straight away (bypassing grub!), which is the right way to do.

With the dracut-built initramfs that is no longer the case - I am seeing the grub menu and I have the usual choice of my bootup options, which is a VERY DANGEROUS thing as if I forget that I've hibernated a Linux system and boot another (which happens to use the same swap space) when I later on attempt to restart the old (previously hibernated) system there will be an almighty crash which will most definitely result in a corruption of my entire system.


Maybe there's already such simplified tool?
That is the ONLY alternative, sadly! I tried to see if I could fit in the various binaries without installing a large group of dependencies, but I was frustrated by failure!

The pcscd daemon (which is essential for reading token data) depends on both HAL and D-Bus running (at least that is the case with my FC13 system). That means I have to install an additional set of about 23 packages in order to make this work - a futile exercise!

So, in conclusion - until there is either a stripped-down version of pkcs11-tool or another similar program which does not require large number of dependencies to run and read a token data from a smartcard, installing such a module is nigh impossible!

--
To unsubscribe from this list: send the line "unsubscribe initramfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Kernel]     [Linux USB Devel]     [Linux Audio Users]     [Yosemite News]     [Linux SCSI]

  Powered by Linux