Package: cryptsetup Version: 2:2.6.1-4 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Hello, I am dual-booted with a Windows install encrypted by VeraCrypt. I have the following entry in /etc/crypttab to decrypt the filesystem: cryptwin PARTUUID=dfefa23b-02 none tcrypt,tcrypt-system,veracrypt The tcrypt-system option is needed because this is a system partition. It's not documented in the crypttab(5) man page, but I read about it on the Arch Wiki and it worked for me on Debian bookworm. When I updated my system after bookworm's stable release, upgrading it to trixie, I got the warning "ignoring unknown option 'tcrypt-system'" and it failed to decrypt the partition. Checking crypttab(5) again, it still doesn't mention anything about the tcrypt-system option, but the cryptsetup(8) man page stil has the --tcrypt-system flag listed, so the feature wasn't removed. I can't find any information on how to decrypt a VeraCrypt system partition other than with this option. I can still manually use --tcrypt-system to open it with cryptsetup, but the option is now unknown in crypttab. What happened between bookworm and trixie? - -- Ben Westover - -- System Information: Debian Release: 12.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-9-amd64 (SMP w/4 CPU threads; PREEMPT) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages cryptsetup depends on: ii cryptsetup-bin 2:2.6.1-4 ii debconf [debconf-2.0] 1.5.82 ii dmsetup 2:1.02.185-2 ii libc6 2.36-9 cryptsetup recommends no packages. Versions of packages cryptsetup suggests: ii cryptsetup-initramfs 2:2.6.1-4 ii dosfstools 4.2-1 ii keyutils 1.6.3-2 ii liblocale-gettext-perl 1.07-5 -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOGnacqRhdU6eNmtFwxHF9U6JtpgFAmSKcDIACgkQwxHF9U6J tphJTA//UBx1n+3MleEXiizCZm26nkWovfBu17jiuedmXbx9MHBTjnkuD5SOvAr7 OwMJX4xRLtXR6ez6j02A2yqGaM6ZROmKT9lbXtYnzkPNyfOjrnKq0eWT2uPGx/hV qrHQdsAB1noiO/Y8uj8ovdYNxZ1yJuVuWHZE0Ugqip2wXpiOPQvVBGWeAaUwL2NP bnDpTclXimDEp3A4wfCXgJOwsUBLUpkVx7q1S0HPgzoyB4LQIfR1MSMbua9q+iwq wjxnNe1ySISFOCxoO4Dv+648tQfLC2GbnXNBang1Gl1VKfCMX7unirVuGBwivX1N 0KdNsEIzsMco4YCQ27nseKNb7ffE8uQ0EbcV35muCguACz2iHPHw0vRhlv/rPKa6 3/kquSG3Fc5+mje36e+y1dWNAiRw6xbR9jTzllhHE6HffCgOZf5C8apQkyYGrTuC zLSyav84SOragi8nFGEe8wb6D2l4sHtz4maaGTj8TnBDdsrj59xxD/E7sjbvmYXM mPhHFoZXl7XDJXKKC9gezhLyPWeyDtrsmXMfHRrzZipbtMkKEpBRXOyCyQivQvPy B504ktFdwCQnDe8RmM+qvIxySEDY3IC4SofId4vUjcgr3KxodIJ8RPNrzONipOw6 0CTIfpiQxd1qJfW4B0huzJ0nWSIp91jgqqAjjgvY3RsdlCplgEs= =2fkH -----END PGP SIGNATURE-----