Feedback on Lab 22.2 Encrypted Swap

I just wanted to point out that at step 5 (a) it gives an example config for /etc/crypttab. Specifically:
swapcrypt /dev/sda11 /dev/urandom swap,cipher=aes-cbc-essiv:sha256,size=256
Because i read the man pages as extensively as i can, i noticed that:
1) From man crypttab "...note however that LUKS requires a persistent key and therefore does not support random data keys"
2) From man cryptsetup "The current default in the distributed sources is "aes-cbc-essiv:sha256" for plain dm-crypt and "aes-xts-plain64" for LUKS."
So it seems that both /dev/urandom and cipher don't (or won't) work. I know that it mentions that it is an example but it could cause trouble to some.
i didn't tyr to replicate the above to see if it will work at all, since i had already done twice the 22.1 lab, with 2 virtual drives (one with boot mount, and one with not), and i had to troubleshoot, since i did a mistake of "sudo vim crypttab" instead of "sudo vim /etc/crypttab" (you guess what happened, system didn't boot, and ended up in emergency mode. Thankfully i found the error in the first couple of minutes).
The above is from the last update March 27th, 2020.
Comments
-
I don't know what distribution or version of crypttab you have. On the machine I'm currently on there is no such statement, and in fact it says: F"or swap encryption, /dev/urandom or the hardware device /dev/hw_random can be used as the password file" and in the example section at the end it says:
swap /dev/sda7 /dev/urandom swap
This is RHEL 8, and the man page says "systemd 239" at the end and the rpm is cryptsetup-2.2.0-2.el8.x86_64So whether you are using and older or newer version I don't know. In general anything with either crypt or pam stuff tends to be distro to distro dependent in my experience. This is one reason we eliminated the pam lab because every time we fixed it
for one distro (say ubuntu) it broke it on centos.0 -
Hi KonstantinA ,
Well, I don't see an error to report. It's useful to know what distro and version the person is working on, as well the kernel version. So in case if there is any error, one can try to replicate the error.
And as Coop said, anything related to cipher changes depends on the distro you are working on.
Regards,
Luis.0 -
You are right. What i posted originally comes from Ubuntu with cryptsetup 2:2.0.2-1ubuntu1.1, while on Fedora's cryptsetup-2.3.0-1.fc31.x86_64, the manual pages have changed.
So it is related to the cryptsetup version.1
Categories
- All Categories
- 145 LFX Mentorship
- 145 LFX Mentorship: Linux Kernel
- 817 Linux Foundation IT Professional Programs
- 369 Cloud Engineer IT Professional Program
- 183 Advanced Cloud Engineer IT Professional Program
- 83 DevOps Engineer IT Professional Program
- 151 Cloud Native Developer IT Professional Program
- 143 Express Training Courses & Microlearning
- 143 Express Courses - Discussion Forum
- Microlearning - Discussion Forum
- 6.7K Training Courses
- 48 LFC110 Class Forum - Discontinued
- 73 LFC131 Class Forum
- 49 LFD102 Class Forum
- 238 LFD103 Class Forum
- 22 LFD110 Class Forum
- 45 LFD121 Class Forum
- 1 LFD123 Class Forum
- LFD125 Class Forum
- 18 LFD133 Class Forum
- 9 LFD134 Class Forum
- 18 LFD137 Class Forum
- 72 LFD201 Class Forum
- 5 LFD210 Class Forum
- 5 LFD210-CN Class Forum
- 2 LFD213 Class Forum - Discontinued
- 128 LFD232 Class Forum - Discontinued
- 2 LFD233 Class Forum
- 4 LFD237 Class Forum
- 24 LFD254 Class Forum
- 724 LFD259 Class Forum
- 111 LFD272 Class Forum - Discontinued
- 4 LFD272-JP クラス フォーラム
- 13 LFD273 Class Forum
- 259 LFS101 Class Forum
- 2 LFS111 Class Forum
- 3 LFS112 Class Forum
- 3 LFS116 Class Forum
- 7 LFS118 Class Forum
- 1 LFS120 Class Forum
- 9 LFS142 Class Forum
- 8 LFS144 Class Forum
- 4 LFS145 Class Forum
- 4 LFS146 Class Forum
- 16 LFS148 Class Forum
- 15 LFS151 Class Forum
- 5 LFS157 Class Forum
- 72 LFS158 Class Forum
- LFS158-JP クラス フォーラム
- 12 LFS162 Class Forum
- 2 LFS166 Class Forum
- 7 LFS167 Class Forum
- 3 LFS170 Class Forum
- 2 LFS171 Class Forum
- 3 LFS178 Class Forum
- 3 LFS180 Class Forum
- 2 LFS182 Class Forum
- 5 LFS183 Class Forum
- 34 LFS200 Class Forum
- 737 LFS201 Class Forum - Discontinued
- 3 LFS201-JP クラス フォーラム - Discontinued
- 21 LFS203 Class Forum
- 135 LFS207 Class Forum
- 2 LFS207-DE-Klassenforum
- 2 LFS207-JP クラス フォーラム
- 302 LFS211 Class Forum
- 56 LFS216 Class Forum
- 55 LFS241 Class Forum
- 50 LFS242 Class Forum
- 38 LFS243 Class Forum
- 16 LFS244 Class Forum
- 6 LFS245 Class Forum
- LFS246 Class Forum
- LFS248 Class Forum
- 113 LFS250 Class Forum
- 2 LFS250-JP クラス フォーラム
- 1 LFS251 Class Forum
- 157 LFS253 Class Forum
- 1 LFS254 Class Forum
- 2 LFS255 Class Forum
- 13 LFS256 Class Forum
- 1 LFS257 Class Forum
- 1.3K LFS258 Class Forum
- 11 LFS258-JP クラス フォーラム
- 135 LFS260 Class Forum
- 162 LFS261 Class Forum
- 43 LFS262 Class Forum
- 82 LFS263 Class Forum - Discontinued
- 15 LFS264 Class Forum - Discontinued
- 11 LFS266 Class Forum - Discontinued
- 24 LFS267 Class Forum
- 25 LFS268 Class Forum
- 37 LFS269 Class Forum
- 7 LFS270 Class Forum
- 202 LFS272 Class Forum - Discontinued
- 2 LFS272-JP クラス フォーラム
- 4 LFS147 Class Forum
- 2 LFS274 Class Forum
- 4 LFS281 Class Forum
- 18 LFW111 Class Forum
- 262 LFW211 Class Forum
- 186 LFW212 Class Forum
- 15 SKF100 Class Forum
- 1 SKF200 Class Forum
- 2 SKF201 Class Forum
- 797 Hardware
- 199 Drivers
- 68 I/O Devices
- 37 Monitors
- 104 Multimedia
- 174 Networking
- 91 Printers & Scanners
- 85 Storage
- 762 Linux Distributions
- 82 Debian
- 67 Fedora
- 18 Linux Mint
- 13 Mageia
- 23 openSUSE
- 149 Red Hat Enterprise
- 31 Slackware
- 13 SUSE Enterprise
- 355 Ubuntu
- 470 Linux System Administration
- 39 Cloud Computing
- 71 Command Line/Scripting
- Github systems admin projects
- 95 Linux Security
- 78 Network Management
- 102 System Management
- 47 Web Management
- 69 Mobile Computing
- 18 Android
- 38 Development
- 1.2K New to Linux
- 1K Getting Started with Linux
- 379 Off Topic
- 115 Introductions
- 177 Small Talk
- 26 Study Material
- 808 Programming and Development
- 304 Kernel Development
- 486 Software Development
- 1.8K Software
- 263 Applications
- 183 Command Line
- 3 Compiling/Installing
- 988 Games
- 317 Installation
- 104 All In Program
- 104 All In Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)