On September 9, 2015 10:42:18 PM Bruce Dubbs <[email protected]> wrote:
Tim Tassonis wrote:
Hi all
A while ago, I suggested some minor changes to the install of popt
libgpg-error and libgcrypt, mainly concerning the fact that due to
cryptsetup, these packages might be needed in early boot. As there was
no reply from anybody, I wonder, whether these were overlooked or deemed
to be unneeded because cryptsetup is not part of the book?
Yes, that's the case. cryptsetup is not part of the book. However your
message comes up in a search for others to find.
As a note, I do not see why the root partition needs to be encrypted.
It's data that's important, not executables, libraries, and support files.
Neither do I, just thought the moving doesn't harm and if anybody for some
strange reason wants to have an encrypted /usr along an unencrypted root,
then these moves would make that possible. For that reason, debian also
has those in /lib.
But I fully agree with you that personally, I don't really see the point in
such a setup.
-- Bruce
Anyways, just in case, I add them below again:
cryptsetup seems to be the preferred program to setup encrypted
partitions on linux and might be used in early boot, i.e. to mount an
encrypted /usr partition.
As cryptsetup depends on libgpg-error, libgrypt and popt, it might be a
good idea to ensure that these libraries are installed in /lib instead
of /usr/lib. In style of LFS/BLFS, the following commands could be added
to the installation of those packages:
- libgpg-error, after make install:
mv -v /usr/lib/libgpg-error.so.* /lib
ln -sf ../../lib/$(readlink /usr/lib/libgpg-error.so)
/usr/lib/libgpg-error.so
- libgcrypt, after make install:
mv -v /usr/lib/libgcrypt.so.* /lib
ln -sf ../../lib/$(readlink /usr/lib/libgcrypt.so) /usr/lib/libgcrypt.so
- popt, after make install:
mv -v /usr/lib/libpopt.so.* /lib
ln -svf ../../lib/$(readlink /usr/lib/libpopt.so) /usr/lib/libpopt.so
Kind regards
Tim
--
http://lists.linuxfromscratch.org/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
--
http://lists.linuxfromscratch.org/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
