1. Forum
  2. Usenet
  3. LINUX.DEBIAN.DOC

  • Re: Bug#1108823: trixie: mention issue with cryptsetup support having b

    From Richard Lewis@21:1/5 to Konstantin Khomoutov on Sat Jul 5 19:50:01 2025
    Konstantin Khomoutov <[email protected]> writes:

    Package: release-notes
    Severity: normal
    Tags: patch

    Hi!

    The support for opening and mounting encrypted storage devices (managed by cryptsetup`) in systemd has been moved into a separate package, systemd-cryptsetup`. If a system being upgraded to Trixie has installation of recommended packages disabled (like does mine)


    Not sure what others think of this?

    to me, it sets a bad precedent to try and support this kind of
    thing. Recommends are installed by default, and should only removed by
    people who know what they are doing: i think that's a policy that has
    been consistently stated by debian for at least a decade?

    If people are playing with recommends of critial packages like systemd
    then they should be expected to know what they are doing, including on upgrades.

    On the other hand, not booting is obviously a bad outcome, so maybe this
    is an exceptional case?


    or the user for some reason has
    initiated the upgrade process with a call like

    apt dist-uprade --no-install-recommends

    this seems like a very bad, and unsupported, approach!

    and the user has any encrypted filesystem listed in /etc/fstab or in a custom systemd unit file of type "mount", the system may not boot properly - see, for example, my case [1], and also [2] and [3].

    I hence recommend to prominently mention this issue in the Trixie release notes.

    diff --git a/source/issues.rst b/source/issues.rst
    index fea92a02..6698bb1c 100644
    --- a/source/issues.rst
    +++ b/source/issues.rst
    @@ -41,6 +41,20 @@ possible, or retiring the hardware.
    `Cross-grading <https://wiki.debian.org/CrossGrading>`__ without a
    reinstall is a technically possible, but risky, alternative.

    +.. _systemd-cryptsetup-support-moved-to-separate-package:
    +
    +Support in ``systemd`` for opening and mounting encrypted storage devices +at boot has been moved into a separate package,
    ``systemd-cryptsetup``.

    maybe we just include this part (with corrected markup), plus a
    statement that the ``systemd`` package in Trixie recommends the new
    package so you should check it is installed.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Gevers@21:1/5 to All on Sun Jul 6 10:50:02 2025
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------9lUtBMhc24ZyvADYlw7RoJR5
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGksDQoNCk9uIDA1LTA3LTIwMjUgMjE6MzMsIEp1c3RpbiBCIFJ5ZSB3cm90ZToNCj4gVGhp cyBpc3N1ZSBpcyBhIGJpZw0KPiBlbm91Z2ggcmlzayB0aGF0IGl0IHNlZW1zIHRvIG1lIHdl IHByb2JhYmx5IGRvIHdhbnQgdG8gZmxhZyBpdCB1cCwgYnV0DQo+IGl0IG1pZ2h0IGV2ZW4g YmUgd29ydGggdGFraW5nIHRoZSBvcHBvcnR1bml0eSB0byBoaW50IHRoYXQgdGhpcyBraW5k DQo+IG9mIGNvbnNlcXVlbmNlIGlzIHdoeSBpdCdzIG5vdCByZWNvbW1lbmRlZC4NCg0KDQpG dWxseSBhZ3JlZS4NCg0KPiAgIC4uIF9zeXN0ZW1kLWNyeXB0c2V0dXAtc3VwcG9ydC1tb3Zl ZC10by1zZXBhcmF0ZS1wYWNrYWdlOg0KPiANCj4gKFNob3VsZG4ndCB0aGVyZSBiZSBhIHZp c2libGUgaGVhZGluZyBoZXJlPykNCg0KDQpJbmRlZWQuDQoNCj4gICBTdXBwb3J0IGluIGBz eXN0ZW1kYCBmb3Igb3BlbmluZyBhbmQgbW91bnRpbmcgZW5jcnlwdGVkIHN0b3JhZ2UgZGV2 aWNlcw0KPiAgIGF0IGJvb3QgaGFzIGJlZW4gbW92ZWQgaW50byBhIHNlcGFyYXRlIHBhY2th Z2UsIGBzeXN0ZW1kLWNyeXB0c2V0dXBgLA0KPiAgIHdoaWNoIGlzIHJlY29tbWVuZGVkIGJ5 IHRoZSBgc3lzdGVtZGAgcGFja2FnZSBpbiB0cml4aWUuDQo+IA0KPiAgIFVzZXJzIG9mIGVu Y3J5cHRlZCBmaWxlc3lzdGVtcyBzaG91bGQgZG91YmxlLWNoZWNrIHRoYXQgdGhpcyBwYWNr YWdlIGlzDQo+ICAgaW5zdGFsbGVkIGFzIGludGVuZGVkIGJlZm9yZSByZWJvb3RpbmcuIFRo aXMgaXMgYSBjYXNlIHdoZXJlIG92ZXJyaWRpbmcNCj4gICBzdGFuZGFyZCBkZXBlbmRlbmN5 IHJlc29sdXRpb24gaW4gYGFwdGAgY2FuIHJlc3VsdCBpbiBhbiB1bmJvb3RhYmxlDQo+ICAg c3lzdGVtLg0KDQoNCkkga25vdyB3aGF0IHlvdSB3YW50IHRvIHNheSBpbiB0aGUgbGFzdCBz ZW50ZW5jZSBiZWNhdXNlIEkgaGF2ZSB0aGUgDQpjb250ZXh0LCBidXQgSSBkb24ndCBleHBl Y3QgbW9zdCByZWFkZXJzIHRvIGdyYXNwIHdoYXQgeW91IG1lYW4gaGVyZS4gDQpQcm9iYWJs eSB3b3J0aCBiZWluZyBleHBsaWNpdCBhYm91dCB0aGF0IHdlJ3JlIHRhbGtpbmcgYWJvdXQg DQoiLS1uby1pbnN0YWxsLXJlY29tbWVuZHMiIGhlcmU6DQoNCiAgIFRoaXMgaXMgYSBjYXNl IHdoZXJlIG92ZXJyaWRpbmcNCiAgIHN0YW5kYXJkIGRlcGVuZGVuY3kgcmVzb2x1dGlvbiBp biBgYXB0YCAoZS5nLiBieSB1c2luZw0KICAgYC0tbm8taW5zdGFsbC1yZWNvbW1lbmRzYCkg Y2FuIHJlc3VsdCBpbiBhbiB1bmJvb3RhYmxlDQogICBzeXN0ZW0uDQoNClBhdWwNCg==

    --------------9lUtBMhc24ZyvADYlw7RoJR5--

    -----BEGIN PGP SIGNATURE-----

    wsC7BAABCABvBYJoajRSCRCcXJnrBb11CkcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmcdYuIA9uqPWHKYKk0EHI+jJrCpxXwCdVGO+fCPassy OhYhBFi2bUhza+k7BS3mcpxcmesFvXUKAAC3+wf/bfQlGb6MPd8Eoumuhino8SQI 7iTPTzOVAk5agOV7RhQdKSA0bjiFYCdoR+xEa/OWe3f1HnMeXu5IQ3PzbsESl9b0 mDSLkoiH3TUrvbeN5klT9/igH6ra23Mym55tJrvzbm0R822rJpW7w4MsjyfIwJjR wkH0N5IRaT0IfyCXVa8Ju/zeBmJwYeOnaaBSlwy0wra5q1tryqd4fBdzM8g65AOM RIcO8TkFt0X2lewKsldMBOeFbsQtEB+cr6iR6A7eNYGUX3UJuPM2SfLgnLOQsv5f 6qsfv8qrp5Y+xx08ad+GTTAwWQgblN9hAR8lK6Dggp2jRpJfi7v7dDWgdohonw==
    =5jS8
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)