Bug 653004

Summary:	sys-fs/cryptsetup - /etc/init.d/dmcrypt: add more options for keyfiles and temp device
Product:	Gentoo Linux	Reporter:	ARaspiK <araspik>
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	UNCONFIRMED ---
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description ARaspiK 2018-04-12 09:40:13 UTC

[Note: First bug filed]

I'd like to suggest adding more advanced keyfile options (size and offset, specifically) and a 'tempmnt'-like option that allows one to temporarily mount something that is encrypted and use it as a keyfile.

My /boot contains a keys files, which is a LUKS container which consists of keys which are side-by-side on the disk and have to be accessed via --keyfile-offset and --keyfile-size. For extra security I should be able to only temporarily mount /boot/keys.

Comment 1 ARaspiK 2018-04-12 09:43:02 UTC

I suggest that along with target and swap, a tempmnt section can be specified with all the regular options, but it is remembered and detached when everything has been mounted.