#515294 cryptsetup: Configurable passphrase prompt

Package:
cryptsetup
Source:
cryptsetup
Description:
disk encryption support - startup scripts
Submitter:
dick
Date:
2013-11-02 13:03:04 UTC
Severity:
wishlist
#515294#5
Date:
2009-02-15 14:10:19 UTC
From:
To:
Is it possible, please, to make the prompt for the LUKS passphrase at boot
time configurable.  At the moment it is 'hard coded' in
/usr/share/initramfs-tools/scripts/local-top/cryptroot

Apart from me (who wants to just prompt 'Authorised key:') there may well be
some who prefer to use a different language from English.

Thanks

Dick

#515294#10
Date:
2011-02-13 12:51:21 UTC
From:
To:
Hey,

I'm unsure what to do about that bug. Maybe the initramfs maintainers
have a suggestion?

either the cryptroot-hook modifies the prompt in cryptroot-script
according to an environment variable at mkinitramfs time.

or a configuration file is added to the initramfs, which the
cryptroot-script includes in order to set the prompt.

question to the initramfs maintainers: are the environment variables
from /usr/share/initramfs-tools/conf-hooks.d/* available to the
initramfs hook scripts? It seems to me that this is not the case.

and the second question: initramfs doesn't have support for translated
strings yet, does it?

greetings,
 jonas

#515294#15
Date:
2013-11-02 13:00:19 UTC
From:
To:
Hi Jonas and dick,

Am Freitag, den 01.11.2013, 17:52 +0100 schrieb Jonas Meurer:
supports the option "key" which sets the cryptkey variable, which is the
prompt.

But: The setting is overwritten if crypotkeyscript is not set, i.e. if
the option "keyscript" is not used. So for now, dick, you should be able
to configure your prompt by adding

        crypotopts=keyscript=/lib/cryptsetup/askpass,key="Authorised
        key:"

to the kernel prompt (and I’m not sure about the quoting of the space;
I’m not very confident in shell scripts behavior in that regard).

I guess one should support setting key without having to set keyscript,
though.

Greetings,
Joachim