Re: [gNewSense-users] Mipsel gNS 3 + crypto

[Ted Smith]

On Sun, 2010-05-09 at 16:51 +0930, Karl Goetz wrote:
> On Sun, 09 May 2010 03:11:56 -0400
> Ted Smith <address@hidden> wrote:
> 
> > On Sun, 2010-05-09 at 16:08 +0930, Karl Goetz wrote:
> > > On Sun, 09 May 2010 02:06:15 -0400
> > > Ted Smith <address@hidden> wrote:
> > > 
> > > > On Sun, 2010-05-09 at 12:13 +0930, Karl Goetz wrote:
> > > > > On Sat, 08 May 2010 18:27:33 -0400
> > > > > Ted Smith <address@hidden> wrote:
> > > > > 
> > > > > > Hey everyone,
> > > > > > 
> > > > > > I just got a Yeeloong netbook, and because I value my privacy
> > > > > > just as much as I value my freedom, I want to install gNS on
> > > > > > it with full-disk encryption. debian-installer can do this,
> > > > > > usually.
> > > > > > 
> > > > > > However, when I try to set a partition to be used for
> > > > > > encryption in the partitioning stage of d-i by selecting
> > > > > > "physical partition for use in encryption" and hitting enter,
> > > > > > the installer just takes me back to whatever I had selected
> > > > > > before.
> > > > > > 
> > > > > > Is this a bug, or is crypto unsupported for gNS 3/mispel? How
> > > > > > could I go about getting past whatever blockage there is so I
> > > > > > could have a fully encrypted and fully free computing
> > > > > > experience?
> > > > > 
> > > > > We don't (currently) support encrypted installs.
> > > > > ftr, if you do go that way you'll probably need to have an
> > > > > unencrypted /boot/, since i doubt pmon will support
> > > > > encrypted filesystems.
> > > > 
> > > > Why is this? I couldn't find anything relevant with a few searches
> > > 
> > > effort, time, knowledge. all of which can be invested into
> > > debian-installer by people wanting to use encrypted systems.
> > 
> > Is this a gNS problem or an upstream problem?
> 
> upstream d-i supports crypted filesystems, but i don't know if that was
> added after the version we are using was frozen off or not. when we
> rebase we may gain that ability by default, but i'm not spending my
> energy to make it happen yet.

I'm willing to bottom-line this, depending on what are we talking here -
a preseed option, or modifications to something deeper and more
involved?

Where can I get more information about this? Should I be looking into
d-i, or debian/mipsel?

My first priority is getting a usable encrypted system, but this is
something that _has_ to work for me to be able to recommend gNS, so I'll
see what I can do.

signature.asc
Description: This is a digitally signed message part