Ondrej Kozina
684f43d84d
Clarify confirmation prompt text.
...
Fixes : #473
2019-11-22 15:34:16 +01:00
Milan Broz
6b1be52e6b
Fix LUKS1 format if pkbdf benchamr is disabled.
...
We use minimum iteration for key digest in this case
(the same already used in LUKS2).
Fixes : #478 .
2019-11-22 13:02:41 +01:00
Ondrej Kozina
de6258d366
Allow --test-passphrase for detached header alone.
...
Before this fix we required data device specified on cmd line
even though it was not necessary for testing passphrase.
Fixes : #487 .
2019-11-19 14:36:06 +01:00
Ondrej Kozina
5e4dbf33be
Allow --key-file option in legacy offline encryption.
...
The option was ignored for LUKS1 encryption initialization.
Fixes : #491 .
2019-11-19 12:41:14 +01:00
Milan Broz
b03cb3f3d8
Export memory safe functions.
...
Make crypt_safe_alloc/realloc/free and memzero part of API.
2019-11-16 21:28:54 +01:00
Ondrej Kozina
e08401a2ec
Properly fix encryption initialization message.
2019-11-08 13:15:37 +01:00
Ondrej Kozina
0a9e7028ae
Fix LUKS2 encryption initialization with non-zero keyslot.
...
Positive keyslot number was interpreted as a failure.
2019-11-08 13:15:37 +01:00
Milan Broz
ba0ecc54df
Test Bionic distro in Travis.
2019-11-05 22:09:05 +01:00
Milan Broz
6920f9dc27
Set devel version.
2019-11-05 17:56:58 +01:00
Milan Broz
ba2547212e
Allow bitlk branch for CI tests.
2019-11-05 17:53:07 +01:00
Milan Broz
bbe1a8a5b6
Update Readme.md for 2.2.2.
2019-11-01 10:16:05 +01:00
Milan Broz
c82728f04d
Version 2.2.2.
v2.2.2
2019-11-01 09:02:46 +01:00
Milan Broz
cc0d33bca7
Fix DM_DEVICE_GET_TARGET_VERSION detection.
...
Stable libdevampper used changed name for dm task, let's fix it.
2019-10-31 20:35:46 +01:00
Milan Broz
3933ec7dce
Add Ondra to authors.
2019-10-31 20:02:51 +01:00
Petr Pisar
f8c9507612
po: update cs.po (from translationproject.org)
2019-10-31 20:01:51 +01:00
Yuri Kozlov
7c5c9ae8fd
po: update ru.po (from translationproject.org)
2019-10-31 12:10:04 +01:00
Frédéric Marchal
cd00792fe9
po: update fr.po (from translationproject.org)
2019-10-31 12:10:04 +01:00
Ondrej Kozina
df390509b2
Hotfix missing new line character in translated string.
...
Without this fix the message gets immediately overwritten with
reencryption progress bar.
2019-10-31 12:02:55 +01:00
Ondrej Kozina
dd6abe9375
Add luks2-reencryption-test to valgrind checks.
2019-10-22 15:07:57 +02:00
Milan Broz
a3f199d0a3
po: update pot file
2019-10-20 10:40:12 +02:00
Yuri Chornoivan
8e3b85ee12
po: update uk.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Jakub Bogusz
e60fbfc865
po: update pl.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Hiroshi Takekawa
a512488fd7
po: update ja.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Antonio Ceballos
1981d909cf
po: update es.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Roland Illig
ea14f2c98c
po: update de.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Milan Broz
c81becf10d
Prepare version tag, and sync po files.
...
(For some reason I unsynced all po files again,
this patch reverts them to the translationproject versions...)
2019-10-18 10:52:33 +02:00
dofrupisla
1433d040ae
Fix luksHeaderRestore occuring twice
2019-10-17 11:07:32 +02:00
Milan Broz
206b70c837
Explicitly print error message if keyslot open failed.
...
The only quiet message now is EPERM (wrong password) that is
processed by the caller.
Fixes #488 .
2019-10-11 14:06:49 +02:00
Ondrej Kozina
bb857dcef2
Silence reencryption compat test.
2019-10-11 12:40:14 +02:00
Ondrej Kozina
5568a780a9
Add missing error message to translation.
2019-10-11 12:40:09 +02:00
Ondrej Kozina
7c2086967b
Add various units for progress speed reporting.
...
The progress function remained silent unless the speed was higher
than minimal delta for double type in MiB/s. That could confuse
users that progress got stucked, but it in fact it was only slow.
Now wipe and reencryption progess functions can report speeds
in B/s up to GiB/s.
2019-10-11 12:40:03 +02:00
Ondrej Kozina
f7fbf4d38c
Fix bogus speed reports after resuming tracked operation.
...
When resuming reencryption operation (both LUKS2 and legacy offline
code) speeds were incorectly calculated from whole progress including
range already reencrypted in previous runs. Now we track speed only
for currently running session.
2019-10-11 12:39:59 +02:00
Ondrej Kozina
0c8cf5c1e0
Switch cryptsetup-reencrypt to use tools_reencrypt_progress.
2019-10-11 12:39:51 +02:00
Milan Broz
33f2af1c09
Change --version option handling and support -V short option.
...
Fixes #480 .
2019-10-10 10:51:04 +02:00
Ondrej Kozina
c9a7e6e4ec
Add blkid wipe report messages to translations.
2019-10-08 15:31:57 +02:00
Ondrej Kozina
86bb4ea8f2
Report offsets when wiping device signatures.
...
Fixes : #489 .
2019-10-08 15:31:57 +02:00
Milan Broz
99c4e83994
Properly support LTLIBINTL setting in Makefiles.
...
Fixes #479 .
2019-10-08 15:26:13 +02:00
Milan Broz
ca2f5a8160
Fix tests in previous commits.
2019-10-08 14:58:07 +02:00
Milan Broz
7af304251e
Fix activation message during encryption process.
2019-10-08 14:57:15 +02:00
Milan Broz
15f5126296
Support new DM_GET_TARGET_VERSION ioctl.
...
This way we can load kernel device-mapper target module before
table create ioctl.
Target version is available since kernel 5.4.
2019-10-08 14:05:30 +02:00
Ondrej Kozina
21edd66892
Allow LUKS2 reencryption to run on systems w/o kernel keyring service.
2019-10-07 14:08:41 +02:00
Ondrej Kozina
3e9d6b6960
Temporarily disable test failing due to deferred remove after decryption.
2019-10-04 13:46:13 +02:00
Ondrej Kozina
62b580904b
Move check for loop device inside crypt_loop_backing_file.
...
It also fixes minor regression where we return backing file
for partition on top of loop device when prompting for passphrase.
Partition on loop has different major number so it should not be
considered loop device at all.
2019-10-04 13:46:13 +02:00
Ondrej Kozina
c4c4f9d159
Mark active device for deferred remove after decryption gets finished.
2019-10-04 12:20:34 +02:00
Ondrej Kozina
67a5ec1567
Abort reencryption initialization sooner on error.
2019-10-04 12:20:29 +02:00
Ondrej Kozina
c646832bfe
Add hard and soft memory limit to reencrypt hotzone size.
...
Currently hard memory limit is 1 GiB. Soft limit is
1/4 of system memory.
Note that --hotzone-size cryptsetup parameter can only further
lower hard and soft memory limit on hotzone size and not bypass
it.
2019-10-04 12:20:22 +02:00
Ondrej Kozina
539d4756f2
Do not flush and freeze fs while swapping in/out overlay device.
2019-10-04 12:20:16 +02:00
Ondrej Kozina
8714e115ad
Remove unused parameter from reencrypt_swap_backing_device.
...
It always loads dm-linear mapping in original device that maps 1:1
to helper overlay device (holding original table).
2019-10-04 12:20:12 +02:00
Ondrej Kozina
9c38e09ad3
Retain activation flags during and after online reencryption.
2019-10-04 12:20:06 +02:00
Ondrej Kozina
5628d7d8b5
Drop duplicite flag in LUKS2 device reload after reencryption.
...
Reload operation implicictly requires shared flag anyway and it's
added later.
2019-10-04 12:19:39 +02:00