Bug#1108823: trixie: mention issue with cryptsetup support having been moved to systemd-cryptsetup
Guilhem Moulin <[email protected]> Fri, 11 Jul 2025 18:08:31 +0200
| Newsgroups | gmane.linux.debian.devel.documentation |
|---|---|
| Message-ID | <aHE2_-MH6dPVcTao__18305.3254427918$1752251234$gmane$org@debian.org> |
Hi, [src:cryptsetup co-maintainer here, but not involved in src:systemd] >.. _systemd-cryptsetup-support-moved-to-separate-package: Thanks for the suggestion! Makes sense to add this in the release notes indeed. > The ``systemd`` package in Trixie recommends it, but on systems with > the installation of recommended packages diabled it will not be automatically > installed by the upgrade process, likely rendering the system unbootable. I think that statement is too strong, as the issue “only” affects systems with encrypted devices that are 1/ prerequisite for a unit file (for instance holding a file system to automount at boot time), and 2/ not unlocked at early boot stage (so not holding the root FS, /usr, or the resume device). So the “LVM-over-crypt” systems one gets out of d-i are unaffected. > If you have installation of recommended packages disabled, > and have any filesystem residing on an encrypted storage device > listed in ``/etc/fstab`` (or being mounted by a custom ``systemd`` unit file), > be sure to install the ``systemd-cryptsetup`` package > before rebooting the system. Suggestion: “If you have an encrypted device which is not holding the root FS, /usr, or a resume device, then be sure to …”. See also the systemd NEWS entry for version 256-2. -- Guilhem.
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmhxNv0ACgkQ05pJnDwh pVIzRQ//dJ4k2CQOqJVaJ7E++H3l9h0ehpGUxfOvWy+TpPZ59+Kb7+J27wjPcyq5 WuI9WFD972pWN96pLjEW+5+7BiavBmYg3RSpo/9/4wVdH1NZDizIRxKx5J4yHqQC GN2I14x7lot09rCAA+QbrBZbhiNESKZjoGUXHUZXpl4lTnkidIbdlPnXB80P4/Yq NfK43LvIvMlIGetCy65BvaVqV/FyilhRrXpxN1ceO4trJu0qbB+z9KYrOIaAuILq 9TZuIhZbbwFFqU80j3LvhUE5NaFWrQ0W8XZTkXR/7gYbVyc9qdBpYggK4ADc+ifU W/71P0oCttBb+Gyayd+8uVrZpPPQDm5HsFMeUvOUsyNBY0Iq2fxD6auEXPpnsINI 0g4xaumjQhJVAVOJXLIBk4iA/nNlrfw8DwtKU4ON7B7aKJKMAeKvJqru9GrFCe+I c5XviOLJO0WM0gYed9QSGPmjlqN+tICHrdygnrGnPRsdWML2aZPMusGfbHPY29KJ KZghdiUw+alg3isMIL7fZ35M/oN+2QNFOEUNiVJGKu8Q9cs8dO/W/3M1zWlYXHZ0 +/kgzXdr5fiB6cgmPhmPZskPaL86DwnuzCx6ai/P1s5cYwkRFPQrZCw+mGIDACLW RjMYvk44k9jipML7Epu1HbDf7I/kEO7606jDlX7up3b7f39Uyyc= =smEP -----END PGP SIGNATURE-----