Package: cryptsetup
Version: 2:2.6.1-4
Severity: normal
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hello,
I am dual-booted with a Windows install encrypted by VeraCrypt. I have
the following entry in /etc/crypttab to decrypt the filesystem:
cryptwin PARTUUID=dfefa23b-02 none tcrypt,tcrypt-system,veracrypt
The tcrypt-system option is needed because this is a system partition.
It's not documented in the crypttab(5) man page, but I read about it on
the Arch Wiki and it worked for me on Debian bookworm.
When I updated my system after bookworm's stable release, upgrading it
to trixie, I got the warning "ignoring unknown option 'tcrypt-system'"
and it failed to decrypt the partition. Checking crypttab(5) again, it
still doesn't mention anything about the tcrypt-system option, but the
cryptsetup(8) man page stil has the --tcrypt-system flag listed, so the
feature wasn't removed. I can't find any information on how to decrypt
a VeraCrypt system partition other than with this option. I can still
manually use --tcrypt-system to open it with cryptsetup, but the option
is now unknown in crypttab. What happened between bookworm and trixie?
- --
Ben Westover
- -- System Information:
Debian Release: 12.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-9-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages cryptsetup depends on:
ii cryptsetup-bin 2:2.6.1-4
ii debconf [debconf-2.0] 1.5.82
ii dmsetup 2:1.02.185-2
ii libc6 2.36-9
cryptsetup recommends no packages.
Versions of packages cryptsetup suggests:
ii cryptsetup-initramfs 2:2.6.1-4
ii dosfstools 4.2-1
ii keyutils 1.6.3-2
ii liblocale-gettext-perl 1.07-5
-----BEGIN PGP SIGNATURE-----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=2fkH
-----END PGP SIGNATURE-----
