Author: Andy Whitcroft
Revision Date: 2015-08-21 08:56:34 UTC

Fix stupid typo in Recommends "busybox | busybox-static" inversion.
Fixes binary moves for busybox into main.

Author: Andy Whitcroft
Revision Date: 2015-08-21 08:56:34 UTC

Fix stupid typo in Recommends "busybox | busybox-static" inversion.
Fixes binary moves for busybox into main.

Author: Adam Conrad
Revision Date: 2015-03-27 18:24:38 UTC

Drop explicit libgcrypt11 dependency from libcryptsetup4.

Author: Adam Conrad
Revision Date: 2015-03-27 18:24:38 UTC

Drop explicit libgcrypt11 dependency from libcryptsetup4.

Author: Dimitri John Ledkov
Revision Date: 2014-05-28 10:39:30 UTC

No change rebuild against new dh_installinit, to call update-rc.d at
postinst.

Author: Dimitri John Ledkov
Revision Date: 2014-05-28 10:39:30 UTC

No change rebuild against new dh_installinit, to call update-rc.d at
postinst.

Author: dc
Revision Date: 2014-04-18 18:10:20 UTC

Fixes bug (LP: #1301086) where askpass fails to restore terminal
settings.

Author: Dimitri John Ledkov
Revision Date: 2013-11-01 16:48:57 UTC

* Merge from debian unstable, remaining changes:
  - debian/control:
    + Bump initramfs-tools Suggests to Depends: so system is not
      potentially rendered unbootable.
    + Depend on plymouth.

  - Invert the "busybox | busybox-static" Recommends, as the latter is
    the one we ship in main as part of the ubuntu-standard task.

  - Remove hardcoded paths to udevadm (LP: #1184066).

  - debian/initramfs/cryptroot-hook:
    + Do not unconditionally include cryptsetup utils in the initramfs.
    + Do not include any modules or utils in the initramfs, unless
      rootfs/resume devices are encrypted or CRYPTSETUP is set to 'y' in
      the initramfs.conf configuration file.

  - debian/cryptsetup.maintscripts:
    + Migrate upstart jobs to new names.

Author: Dimitri John Ledkov
Revision Date: 2013-11-01 16:48:57 UTC

* Merge from debian unstable, remaining changes:
  - debian/control:
    + Bump initramfs-tools Suggests to Depends: so system is not
      potentially rendered unbootable.
    + Depend on plymouth.

  - Invert the "busybox | busybox-static" Recommends, as the latter is
    the one we ship in main as part of the ubuntu-standard task.

  - Remove hardcoded paths to udevadm (LP: #1184066).

  - debian/initramfs/cryptroot-hook:
    + Do not unconditionally include cryptsetup utils in the initramfs.
    + Do not include any modules or utils in the initramfs, unless
      rootfs/resume devices are encrypted or CRYPTSETUP is set to 'y' in
      the initramfs.conf configuration file.

  - debian/cryptsetup.maintscripts:
    + Migrate upstart jobs to new names.

Author: Dimitri John Ledkov
Revision Date: 2013-06-10 16:25:46 UTC

* debian/initramfs/cryptroot-hook:
  - Do not unconditionally include cryptsetup utils in the initramfs.
  - Do not include any modules or utils in the initramfs, unless
    rootfs/resume devices are encrypted or CRYPTSETUP is set to 'y' in
    the initramfs.conf configuration file.

Author: Dimitri John Ledkov
Revision Date: 2013-06-10 16:25:46 UTC

* debian/initramfs/cryptroot-hook:
  - Do not unconditionally include cryptsetup utils in the initramfs.
  - Do not include any modules or utils in the initramfs, unless
    rootfs/resume devices are encrypted or CRYPTSETUP is set to 'y' in
    the initramfs.conf configuration file.

Author: Adam Conrad
Revision Date: 2012-11-16 01:14:35 UTC

Invert the "busybox | busybox-static" Recommends, as the latter
is the one we ship in main as part of the ubuntu-standard task.

Author: Adam Conrad
Revision Date: 2012-11-16 01:14:35 UTC

Invert the "busybox | busybox-static" Recommends, as the latter
is the one we ship in main as part of the ubuntu-standard task.

Author: Dimitri John Ledkov
Revision Date: 2012-08-21 11:57:28 UTC

* Merge from debian unstable (LP: #1015753), remaining changes:
  - debian/control:
    + Bump initramfs-tools Suggests to Depends: so system is not
      potentially rendered unbootable.
    + Depend on plymouth.

  - init/upstart jobs:
    + Add debian/cryptdisks-{enable,udev}.upstart for bootup.
    + debian/cryptdisks{,-early}.init: Make the 'start' action of the init
      script a no-op, this should be handled entirely by the upstart job;
     and fix the LSB header to not declare this should be started in
     runlevel 'S'.
    + Do not install start symlinks for init scripts
    + NB! shutdown is still handled by the SystemV init scripts

* Rename cryptddisks{,-early}.upstart jobs back to
  cryptdisks-{enable,udev}.upstart, as we need both init & upstart jobs
  for now.

* Dropped Changes, included in Debian:
  - debian/control:
    + Split up package in cryptsetup and cryptsetup-bin. (LP: #343363).

  - debian/cryptdisks.functions:
    + Do not overwrite existing filesystems when creating swap (LP: #474258).
    + Add aesni module when we have hardware encryption.
    + Call 'udevadm settle' before 'dmsetup rename' http://pad.lv/874774
    + Suppress "Starting init crypto disks" message in "init" phase, to
      avoid writing over fsck progress text.
    + new function, crypttab_start_one_disk, to look for the named source
      device in /etc/crypttab (by device name, UUID, or label) and start it
      if configured to do so
    + handle the case where crypttab contains a name for the source
      device that is not the kernel's preferred name for it (as is the case
      for LVs).

  - debian/initramfs/cryptroot-hook:
    + Quiet warnings from find on arches that don't have all the
      kernel/{arch,crypto} bits we're testing for.

Author: Steve Langasek
Revision Date: 2012-04-13 20:23:21 UTC

Our swap creation can trigger udev change events, which means udev may be
holding the device open at the time we try to call 'dmsetup rename' and
cause the /subsequent/ events to be missed because of dmsetup creating
device nodes by hand. So call 'udevadm settle' before 'dmsetup rename',
to ensure blkid is out of the way first. This should ensure swap
partitions are found by mountall in a non-racy manner. LP: #874774.

Author: Adam Conrad
Revision Date: 2011-10-01 00:33:00 UTC

debian/cryptroot-hook: Quiet warnings from find on arches that
don't have all the kernel/{arch,crypto} bits we're testing for.

Author: Surbhi Palande
Revision Date: 2011-04-15 14:11:29 UTC

debian/initramfs/cryptroot-script: At boot the user passsword for a
crypted device is captured by plymouth when it is available. On every
key stroke, the "details" plugin in plymouth clears only the current line
before overwriting it with the password prompt. If the prompt is
multilined then the last line ends up being overwritten but the previous
lines are repeated. Changing the password prompt string to be single lined
when plymouth is available. (LP:#566818)

Author: Lorenzo De Liso
Revision Date: 2010-11-27 17:37:43 UTC

* Merge from debian unstable (LP: #682177), remaining changes:
  - debian/control:
    + Bump initramfs-tools Suggests to Depends: so system is not
      potentially rendered unbootable.
    + Depend on plymouth.
  - Add debian/cryptdisks-{enable,udev}.upstart.
  - debian/cryptdisks.functions:
    + new function, crypttab_start_one_disk, to look for the named source
      device in /etc/crypttab (by device name, UUID, or label) and start it
      if configured to do so
    + wrap the call to /lib/cryptsetup/askpass with watershed, to make sure
      we only ever have one of these running at a time; otherwise multiple
      invocations could steal each other's input and/or write over each
      other's output
    + when called by cryptdisks-enable, check that we don't already have a
      corresponding cryptdisks-udev job running (probably waiting for a
      passphrase); if there is, wait until it's finished before continuing.
  - debian/cryptdisks{,-early}.init: Make the 'start' action of the init
    script a no-op, this should be handled entirely by the upstart job;
    and fix the LSB header to not declare this should be started in
    runlevel 'S'
  - debian/cryptsetup.postinst: Remove any symlinks from /etc/rcS.d on
    upgrade.
  - debian/rules:
    + Do not install start symlinks for init scripts, and
      install debian/cryptdisks-{enable,udev}.upstart scripts.
    + link dynamically against libgcrypt and libgpg-error.
  - Add debian/cryptsetup.apport: Apport package hook. Install in
    debian/rules and create dir in debian/cryptsetup.dirs.
  - debian/cryptsetup.postrm: call update-initramfs on package removal.

Author: Daniel Hahler
Revision Date: 2010-10-12 17:18:10 UTC

debian/initramfs/cryptroot-hook: add clearer warning, when line is not
found in /etc/crypttab (LP: #332950)

Author: Steve Langasek
Revision Date: 2010-06-14 21:47:28 UTC

* Merge from Debian unstable (LP: #594365). Remaining changes:
  - debian/control:
    + Bump initramfs-tools Suggests to Depends: so system is not
      potentially rendered unbootable.
    + Depend on plymouth.
  - Add debian/cryptdisks-{enable,udev}.upstart.
  - debian/cryptdisks.functions:
    + new function, crypttab_start_one_disk, to look for the named source
      device in /etc/crypttab (by device name, UUID, or label) and start it
      if configured to do so
    + wrap the call to /lib/cryptsetup/askpass with watershed, to make sure
      we only ever have one of these running at a time; otherwise multiple
      invocations could steal each other's input and/or write over each
      other's output
    + initially create the device under a temporary name and rename it only
      at the end using 'dmsetup rename', to ensure that upstart/mountall
      doesn't see our device before it's ready to go.
    + do_tmp should mount under /var/run/cryptsetup for changing the
      permissions of the filesystem root, not directly on /tmp, since
      mounting on /tmp a) is racy, b) confuses mountall something fierce.
    + when called by cryptdisks-enable, check that we don't already have a
      corresponding cryptdisks-udev job running (probably waiting for a
      passphrase); if there is, wait until it's finished before continuing.
  - debian/cryptdisks{,-early}.init: Make the 'start' action of the init
    script a no-op, this should be handled entirely by the upstart job;
    and fix the LSB header to not declare this should be started in
    runlevel 'S'
  - debian/cryptsetup.postinst: Remove any symlinks from /etc/rcS.d on
    upgrade.
  - debian/rules: Do not install start symlinks for init scripts, and
    install debian/cryptdisks-{enable,udev}.upstart scripts.
  - Add debian/cryptsetup.apport: Apport package hook. Install in
    debian/rules and create dir in debian/cryptsetup.dirs.
  - debian/rules: link dynamically against libgcrypt and libgpg-error.
  - debian/cryptsetup.postrm: call update-initramfs on package removal.
* Dropped changes, merged/superseded in Debian:
  - Add ext4 support to passdev.
  - cryptroot-hook: don't call copy_modules_dir with empty arguments when
    archcrypto isn't found
  - Set USPLASH=y and FRAMEBUFFER=y in the hook config to pull plymouth into
    the initramfs.
  - change interaction to use plymouth directly if present, and if not, to
    fall back to /lib/cryptsetup/askpass as before
  - cryptdisks.functions: replace 'echo -e' bashism with 'printf'.
  - debian/initramfs/cryptroot-script: if plymouth is present in the
    initramfs, use this directly, bypassing the cryptsetup askpass script
  - debian/initramfs/cryptroot-hook: Properly anchor our regexps when
    grepping /etc/crypttab so that we don't incorrectly match device names
    that are substrings of one another.
  - debian/initramfs/cryptroot-script: Don't leak /conf/conf.d/cryptroot
    file descriptor to subprocesses.
  - Fix grammar error in debian/initramfs/cryptroot-script
    ("setup" -> "set up")
  - debian/initramfs/cryptroot-script: Fix this to work with current
    initramfs-tools:
    + Source /scripts/functions after checking for prerequisites.
    + prereqs(): Do not assume we are running within initramfs, and
      calculate relative path correctly.

Author: Colin Watson
Revision Date: 2010-03-29 22:14:24 UTC

debian/initramfs/cryptroot-script: Don't leak /conf/conf.d/cryptroot
file descriptor to subprocesses.

Author: LimCore
Revision Date: 2010-02-04 14:31:15 UTC

/lib/cryptsetup/checks/{un_,}vol_id should fail if vol_id from udev
is not available. LP: #474327.

Author: Steve Langasek
Revision Date: 2009-12-22 23:29:32 UTC

* Depend on watershed.
* cryptdisks.functions: do_tmp should mount under /var/run/cryptsetup for
  changing the permissions of the filesystem root, not directly on /tmp,
  since mounting on /tmp a) is racy, b) confuses mountall something fierce.
  LP: #475936.

Author: Scott James Remnant (Canonical)
Revision Date: 2009-10-14 13:57:59 UTC

Reupload previous version, siretart had left changes in bzr which
weren't documented in the changelog and caused FTBFS.

Author: Steve Langasek
Revision Date: 2009-03-08 16:07:57 UTC

debian/initramfs/cryptroot-script: we don't require vol_id to understand
the encrypted device, but we should check the device is fully up first
before continuing by calling udevadm settle. LP: #291752.

Author: Reinhard Tartler
Revision Date: 2007-11-02 20:53:31 UTC

RELIABILITY FIX: lib/libdevmapper.c: Ensure that pending device creation
events are being processed by calling /sbin/udevsettle. Patch based on
OpenSUSE bug #285478, LP: #132373.

Author: Kees Cook
Revision Date: 2009-04-09 12:29:31 UTC

debian/control: Depend on initramfs-tools so system is not potentially
rendered unbootable (LP: #358654).

Author: Steve Langasek
Revision Date: 2009-03-08 16:07:57 UTC

debian/initramfs/cryptroot-script: we don't require vol_id to understand
the encrypted device, but we should check the device is fully up first
before continuing by calling udevadm settle. LP: #291752.

Author: Dustin Kirkland 
Revision Date: 2008-09-19 18:03:28 UTC

* Fixes for (LP: #272301)
* debian/initramfs/cryptroot-script: must source /scripts/functions to get
  the log_*_msg() functions
* 04_fix_udevsettle_call.patch: fix path to binary for udevsettle

Author: Bruno Barrera Yever
Revision Date: 2008-04-07 18:43:05 UTC

added debian/patches/07_typos_fix.dpatch: fixed typos in man pages. (LP: #164181)

Author: Reinhard Tartler
Revision Date: 2007-11-02 20:53:31 UTC

RELIABILITY FIX: lib/libdevmapper.c: Ensure that pending device creation
events are being processed by calling /sbin/udevsettle. Patch based on
OpenSUSE bug #285478, LP: #132373.

Author: Martin Pitt
Revision Date: 2007-10-11 19:51:58 UTC

* debian/initramfs/cryptroot-script:
  - If the supplied password worked, remove the prompt from usplash again,
    so that the user has some visual feedback that everything is alright.
    (LP: #151305)
  - Do not show the UUID device node of the outer physical device. It is
    scary ("/dev/disk/by-uuid/1234yadayada") and displaying it does not
    improve security at all: If attackers can tamper with your initramfs,
    they can also change the prompt, and if the UUID of the physical device
    changes, then booting will not even get that far. Now it is a much more
    friendly "Enter passphrase for sda5_crypt:" which is still technical,
    but it's necessary to point out which device will be unlocked in case
    there are several.

Author: Stéphane Graber
Revision Date: 2007-04-14 10:03:41 UTC

Wait for Udev to be ready to avoid partition non-detection. (LP: #85640)

Author: Reinhard Tartler
Revision Date: 2007-03-09 15:30:08 UTC

Automated backport upload; no source changes.

Author: Scott James Remnant (Canonical)
Revision Date: 2006-09-21 03:05:18 UTC

Always output and read from the console. Ubuntu: #58794.

Author: Sebastian Dröge
Revision Date: 2006-05-12 22:40:41 UTC

* New upstream release
* Sync with Debian:
  + Tell usplash to quit if we ask for a passphrase

Author: Nafallo Bjälevik
Revision Date: 2005-09-12 23:48:22 UTC

* debian/cryptdisks:
  - Tell usplash to die if it exists and we go interactive.

Author: Wesley W. Terpstra (Debian)
Revision Date: 2004-09-10 21:39:21 UTC

Don't load module loop if it is compiled in (closes: #270836)

Author: Wesley W. Terpstra (Debian)
Revision Date: 2004-06-05 23:29:11 UTC

* Package uploaded to debian (closes: #237716)
* Forced static linking to libgcrypt and libgpg-error
  - needed so that /sbin/cryptsetup does not need /usr/lib/*
  - otherwise could not be used to mount /usr (!!)
* Wrote preinst, postinst, and postrm
  - setup init script links (right after lvm)
  - create a blank /etc/crypttab and /etc/keys dir
* Included a startup script to configure disks
  - sets up all devices listed in /etc/crypttab
  - detects whether or not changes will work
* Cleaned up debian/ directory
  - removed all example files
  - added a package description
  - include Build-Depends
  - depend on dmsetup
  - updated standards version
* New maintainer
  - relabeled previous versions to -0.x to appease dupload