[Pkg-cryptsetup-devel] gpg support for cryptsetup and decrypt_* scripts

[David Härdeman]

On Mon, Feb 18, 2008 at 05:07:05PM +0100, Christoph Anton Mitterer wrote:
>4) The initramfs-tools hooks automatically copy the keyscript into the
>initramdisk.
>But do they also copy the key itself? Probably not, and if I think about
>it, this is probably unwanted, as the key might be stored on a different
>device, etc.
>But it would be nice if it (depending on the choosen keyscript)
>automatically copies gnupg, openssl, openct etc. to the iniramdisk?
>Is this possible and will you add this feature?

Not possible, but I've considered it before...it would be nice if the 
keyscripts could themselves specify what they want to have included in 
the initramfs...perhaps we could add a new requirement in the future 
that if the scripts are run with an environment parameter like 
KEYSCRIPT="deps", they are expected to assist in specifying which 
tool(s) they expect to be included in the initramfs.

As usual it requires time and hacking though :)

-- 
David Härdeman