Feedback on Lab 22.2 Encrypted Swap

I just wanted to point out that at step 5 (a) it gives an example config for /etc/crypttab. Specifically:
swapcrypt /dev/sda11 /dev/urandom swap,cipher=aes-cbc-essiv:sha256,size=256
Because i read the man pages as extensively as i can, i noticed that:
1) From man crypttab "...note however that LUKS requires a persistent key and therefore does not support random data keys"
2) From man cryptsetup "The current default in the distributed sources is "aes-cbc-essiv:sha256" for plain dm-crypt and "aes-xts-plain64" for LUKS."
So it seems that both /dev/urandom and cipher don't (or won't) work. I know that it mentions that it is an example but it could cause trouble to some.
i didn't tyr to replicate the above to see if it will work at all, since i had already done twice the 22.1 lab, with 2 virtual drives (one with boot mount, and one with not), and i had to troubleshoot, since i did a mistake of "sudo vim crypttab" instead of "sudo vim /etc/crypttab" (you guess what happened, system didn't boot, and ended up in emergency mode. Thankfully i found the error in the first couple of minutes).
The above is from the last update March 27th, 2020.
Comments
-
I don't know what distribution or version of crypttab you have. On the machine I'm currently on there is no such statement, and in fact it says: F"or swap encryption, /dev/urandom or the hardware device /dev/hw_random can be used as the password file" and in the example section at the end it says:
swap /dev/sda7 /dev/urandom swap
This is RHEL 8, and the man page says "systemd 239" at the end and the rpm is cryptsetup-2.2.0-2.el8.x86_64So whether you are using and older or newer version I don't know. In general anything with either crypt or pam stuff tends to be distro to distro dependent in my experience. This is one reason we eliminated the pam lab because every time we fixed it
for one distro (say ubuntu) it broke it on centos.0 -
Hi KonstantinA ,
Well, I don't see an error to report. It's useful to know what distro and version the person is working on, as well the kernel version. So in case if there is any error, one can try to replicate the error.
And as Coop said, anything related to cipher changes depends on the distro you are working on.
Regards,
Luis.0 -
You are right. What i posted originally comes from Ubuntu with cryptsetup 2:2.0.2-1ubuntu1.1, while on Fedora's cryptsetup-2.3.0-1.fc31.x86_64, the manual pages have changed.
So it is related to the cryptsetup version.1
Categories
- 10K All Categories
- 29 LFX Mentorship
- 82 LFX Mentorship: Linux Kernel
- 473 Linux Foundation Boot Camps
- 268 Cloud Engineer Boot Camp
- 96 Advanced Cloud Engineer Boot Camp
- 44 DevOps Engineer Boot Camp
- 32 Cloud Native Developer Boot Camp
- 1 Express Training Courses
- 1 Express Courses - Discussion Forum
- 1.6K Training Courses
- 18 LFC110 Class Forum
- 4 LFC131 Class Forum
- 19 LFD102 Class Forum
- 133 LFD103 Class Forum
- 9 LFD121 Class Forum
- 60 LFD201 Class Forum
- LFD210 Class Forum
- 1 LFD213 Class Forum - Discontinued
- 128 LFD232 Class Forum
- 23 LFD254 Class Forum
- 545 LFD259 Class Forum
- 100 LFD272 Class Forum
- 1 LFD272-JP クラス フォーラム
- 1 LFS145 Class Forum
- 20 LFS200 Class Forum
- 739 LFS201 Class Forum
- 1 LFS201-JP クラス フォーラム
- 1 LFS203 Class Forum
- 38 LFS207 Class Forum
- 296 LFS211 Class Forum
- 53 LFS216 Class Forum
- 45 LFS241 Class Forum
- 40 LFS242 Class Forum
- 33 LFS243 Class Forum
- 10 LFS244 Class Forum
- 27 LFS250 Class Forum
- 1 LFS250-JP クラス フォーラム
- 131 LFS253 Class Forum
- 968 LFS258 Class Forum
- 10 LFS258-JP クラス フォーラム
- 86 LFS260 Class Forum
- 124 LFS261 Class Forum
- 29 LFS262 Class Forum
- 78 LFS263 Class Forum
- 15 LFS264 Class Forum
- 10 LFS266 Class Forum
- 17 LFS267 Class Forum
- 16 LFS268 Class Forum
- 14 LFS269 Class Forum
- 195 LFS272 Class Forum
- 1 LFS272-JP クラス フォーラム
- 207 LFW211 Class Forum
- 149 LFW212 Class Forum
- 892 Hardware
- 213 Drivers
- 74 I/O Devices
- 44 Monitors
- 115 Multimedia
- 206 Networking
- 100 Printers & Scanners
- 85 Storage
- 747 Linux Distributions
- 88 Debian
- 64 Fedora
- 13 Linux Mint
- 13 Mageia
- 24 openSUSE
- 133 Red Hat Enterprise
- 33 Slackware
- 13 SUSE Enterprise
- 354 Ubuntu
- 469 Linux System Administration
- 38 Cloud Computing
- 68 Command Line/Scripting
- Github systems admin projects
- 93 Linux Security
- 77 Network Management
- 107 System Management
- 48 Web Management
- 62 Mobile Computing
- 22 Android
- 26 Development
- 1.2K New to Linux
- 1.1K Getting Started with Linux
- 524 Off Topic
- 127 Introductions
- 210 Small Talk
- 19 Study Material
- 783 Programming and Development
- 257 Kernel Development
- 492 Software Development
- 919 Software
- 255 Applications
- 181 Command Line
- 2 Compiling/Installing
- 76 Games
- 316 Installation
- 46 All In Program
- 46 All In Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)