Bug#903163: Adding OpenPGP smartcard support to LUKS

2018-07-23 Thread Chris Lamb
Hi Jonas et al., > I don't think that adding a new binary package for OpenPGP smartcard > support is a good idea and would oppose to it Might smartcard support require some smartcard-specific packaged dependencies that would be solved somewhat elegantly by having a separate binary package? (Jus

Bug#903163: Adding OpenPGP smartcard support to LUKS

2018-07-23 Thread Jonas Meurer
Hi Guilhem and Chris, greetings from Portugal to Taiwan :) Am 16.07.2018 um 19:28 schrieb Guilhem Moulin: > I'm in favor of adding OpenPGP smartcard support to src:cryptsetup, but > not more that one set of hook & boot scripts. Ack. > Since there is already #888916 open requesting merging of so

Bug#903163: Adding OpenPGP smartcard support to LUKS

2018-07-16 Thread Guilhem Moulin
On Mon, 16 Jul 2018 at 18:39:59 +0100, Chris Lamb wrote: > So, whilst I will be at DebCamp too (yay) I unfortunately won't have > any hardware to test with and for various reasons I should keep > commitments low at this point. Sure thing! I was planning to do some triaging anyway :-) (#888916 ha

Bug#903163: Adding OpenPGP smartcard support to LUKS

2018-07-16 Thread Chris Lamb
Dear Guilhem, > > My gut tells me we should incoropate OpenPGP support directly into > > I assume you mean OpenPGP *smartcard* here Yes, mea culpa; wasn't paying attention! :) > Since there is already #888916 open requesting merging of some initramfs > scripts providing OpenPGP smartcard suppor

Bug#903163: Adding OpenPGP smartcard support to LUKS

2018-07-16 Thread Guilhem Moulin
Hi Chris, On Mon, 16 Jul 2018 at 10:15:47 +0100, Chris Lamb wrote: >> Back to https://github.com/eriknellessen/gpg-encrypted-root, I see the >> hook is copying private key material to the initramfs, but […] > > My gut tells me we should incoropate OpenPGP support directly into I assume you mean

Bug#903163: Adding OpenPGP smartcard support to LUKS

2018-07-16 Thread Chris Lamb
Dear Guilhem, > Back to https://github.com/eriknellessen/gpg-encrypted-root, I see the > hook is copying private key material to the initramfs, but […] My gut tells me we should incoropate OpenPGP support directly into Debian's src:cryptsetup simply based on ensuring its on-going maintainability,

Bug#903163: Adding OpenPGP smartcard support to LUKS

2018-07-09 Thread Guilhem Moulin
On Mon, 09 Jul 2018 at 10:14:50 -0700, Kyle Rankin wrote: > Given it is just a shell script, I would vote for incorporating OpenPGP > smartcard support directly into cryptsetup-initramfs so it's available for > users who want encrypted storage without having to know about a standalone > package. W

Bug#903163: Adding OpenPGP smartcard support to LUKS

2018-07-09 Thread Kyle Rankin
Given it is just a shell script, I would vote for incorporating OpenPGP smartcard support directly into cryptsetup-initramfs so it's available for users who want encrypted storage without having to know about a standalone package. -Kyle