Bug 359685 – sys-kernel/dracut: Support for GPG 1.x already supported by Genkernel

• Product: Gentoo Linux
• Status: RESOLVED TEST-REQUEST

[Description Amadeusz Żołnowski (RETIRED) 2011-03-21 00:11:40 UTC]

Genkernel supports keys for LUKS encrypted with GPG since 3.4.11. This functionality needs to be ported into Dracut.

Reproducible: Always

[Comment 1 Amadeusz Żołnowski (RETIRED) 2011-05-05 11:47:25 UTC]

Patches are waiting for inclusion on initramfs mailing list:

  http://permalink.gmane.org/gmane.linux.kernel.initramfs/1890
  http://permalink.gmane.org/gmane.linux.kernel.initramfs/1891

[Comment 2 Amadeusz Żołnowski (RETIRED) 2011-05-08 17:15:21 UTC]

crypt-gpg works both with gpg2 and gpg1.  There's no need for slotting, and therefore removing dependency.

Btw, crypt-gpg reached dracut master branch.

[Comment 3 Amadeusz Żołnowski (RETIRED) 2011-05-10 17:55:18 UTC]

Would be cool if someone would test it. I guess some of you already have this setup with Genkernel.

git clone git://git.kernel.org/pub/scm/boot/dracut/dracut.git
cd dracut
sudo mount /boot
sudo ./dracut -l -H -a crypt-gpg /boot/initramfs-gpg-test.img
sudo umount /boot

man dracut.kernel - section "crypto LUKS - key on removable device support" to see how to setup kernel args

[Comment 4 Amadeusz Żołnowski (RETIRED) 2011-05-10 17:58:16 UTC]

I forgot to generate man pages:

make # to generate man pages
man ./dracut.kernel.7

[Comment 5 Amadeusz Żołnowski (RETIRED) 2011-05-10 18:04:00 UTC]

Created attachment 272753 [details, diff]
0001-dracut.kernel.7-crypto-LUKS-info-about-gpg-encrypted.patch

Man page update in case if it hasn't reached master branch yet.