search

keks24 / raspberry-pi-luks

[mirror] encrypt the "root" partition of the raspberry pi stock image "raspberry pi os lite"
Apache License 2.0
28 stars 2 forks source link

Debian bullseye missing `CRYPTSETUP=` in `/etc/cryptsetup-initramfs/conf-hook` #13

Closed xanoni closed 3 years ago

xanoni commented 3 years ago

I noticed that in bullseye, the file /etc/cryptsetup-initramfs/conf-hook no longer contains the CRYPTSETUP="y" line. Is it still needed?

xanoni commented 3 years ago

FYI, I kept it in the file for now. System booted fine after upgrade to bullseye. I haven't checked if it's truly required.

xanoni commented 3 years ago

Still no problems after several reboots. I consider the guide bullseye ready, just need to clarify what happened to the CRYPTSETUP=X line. I assume it's the standard now and no longer needs to be specified explicitly.

keks24 commented 3 years ago

From Raspberry Pi OS (Buster) in /etc/cryptsetup-initramfs/conf-hook:

#
# CRYPTSETUP: [ y | n ]
#
# [...]
# Note: Honoring this setting will be deprecated in the future.  Please
# uninstall the 'cryptsetup-initramfs' package if you don't want the
# cryptsetup initramfs integration.
#

So, it was already deprecated in Buster and then removed in Bullseye, which means, that installing the package cryptsetup-initramfs should be sufficient.

xanoni commented 3 years ago

cool, as expected then ... thank you