Milan Broz
c82728f04d
Version 2.2.2.
v2.2.2
2019-11-01 09:02:46 +01:00
Milan Broz
cc0d33bca7
Fix DM_DEVICE_GET_TARGET_VERSION detection.
...
Stable libdevampper used changed name for dm task, let's fix it.
2019-10-31 20:35:46 +01:00
Milan Broz
3933ec7dce
Add Ondra to authors.
2019-10-31 20:02:51 +01:00
Petr Pisar
f8c9507612
po: update cs.po (from translationproject.org)
2019-10-31 20:01:51 +01:00
Yuri Kozlov
7c5c9ae8fd
po: update ru.po (from translationproject.org)
2019-10-31 12:10:04 +01:00
Frédéric Marchal
cd00792fe9
po: update fr.po (from translationproject.org)
2019-10-31 12:10:04 +01:00
Ondrej Kozina
df390509b2
Hotfix missing new line character in translated string.
...
Without this fix the message gets immediately overwritten with
reencryption progress bar.
2019-10-31 12:02:55 +01:00
Ondrej Kozina
dd6abe9375
Add luks2-reencryption-test to valgrind checks.
2019-10-22 15:07:57 +02:00
Milan Broz
a3f199d0a3
po: update pot file
2019-10-20 10:40:12 +02:00
Yuri Chornoivan
8e3b85ee12
po: update uk.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Jakub Bogusz
e60fbfc865
po: update pl.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Hiroshi Takekawa
a512488fd7
po: update ja.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Antonio Ceballos
1981d909cf
po: update es.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Roland Illig
ea14f2c98c
po: update de.po (from translationproject.org)
2019-10-20 10:35:43 +02:00
Milan Broz
c81becf10d
Prepare version tag, and sync po files.
...
(For some reason I unsynced all po files again,
this patch reverts them to the translationproject versions...)
2019-10-18 10:52:33 +02:00
dofrupisla
1433d040ae
Fix luksHeaderRestore occuring twice
2019-10-17 11:07:32 +02:00
Milan Broz
206b70c837
Explicitly print error message if keyslot open failed.
...
The only quiet message now is EPERM (wrong password) that is
processed by the caller.
Fixes #488 .
2019-10-11 14:06:49 +02:00
Ondrej Kozina
bb857dcef2
Silence reencryption compat test.
2019-10-11 12:40:14 +02:00
Ondrej Kozina
5568a780a9
Add missing error message to translation.
2019-10-11 12:40:09 +02:00
Ondrej Kozina
7c2086967b
Add various units for progress speed reporting.
...
The progress function remained silent unless the speed was higher
than minimal delta for double type in MiB/s. That could confuse
users that progress got stucked, but it in fact it was only slow.
Now wipe and reencryption progess functions can report speeds
in B/s up to GiB/s.
2019-10-11 12:40:03 +02:00
Ondrej Kozina
f7fbf4d38c
Fix bogus speed reports after resuming tracked operation.
...
When resuming reencryption operation (both LUKS2 and legacy offline
code) speeds were incorectly calculated from whole progress including
range already reencrypted in previous runs. Now we track speed only
for currently running session.
2019-10-11 12:39:59 +02:00
Ondrej Kozina
0c8cf5c1e0
Switch cryptsetup-reencrypt to use tools_reencrypt_progress.
2019-10-11 12:39:51 +02:00
Milan Broz
33f2af1c09
Change --version option handling and support -V short option.
...
Fixes #480 .
2019-10-10 10:51:04 +02:00
Ondrej Kozina
c9a7e6e4ec
Add blkid wipe report messages to translations.
2019-10-08 15:31:57 +02:00
Ondrej Kozina
86bb4ea8f2
Report offsets when wiping device signatures.
...
Fixes : #489 .
2019-10-08 15:31:57 +02:00
Milan Broz
99c4e83994
Properly support LTLIBINTL setting in Makefiles.
...
Fixes #479 .
2019-10-08 15:26:13 +02:00
Milan Broz
ca2f5a8160
Fix tests in previous commits.
2019-10-08 14:58:07 +02:00
Milan Broz
7af304251e
Fix activation message during encryption process.
2019-10-08 14:57:15 +02:00
Milan Broz
15f5126296
Support new DM_GET_TARGET_VERSION ioctl.
...
This way we can load kernel device-mapper target module before
table create ioctl.
Target version is available since kernel 5.4.
2019-10-08 14:05:30 +02:00
Ondrej Kozina
21edd66892
Allow LUKS2 reencryption to run on systems w/o kernel keyring service.
2019-10-07 14:08:41 +02:00
Ondrej Kozina
3e9d6b6960
Temporarily disable test failing due to deferred remove after decryption.
2019-10-04 13:46:13 +02:00
Ondrej Kozina
62b580904b
Move check for loop device inside crypt_loop_backing_file.
...
It also fixes minor regression where we return backing file
for partition on top of loop device when prompting for passphrase.
Partition on loop has different major number so it should not be
considered loop device at all.
2019-10-04 13:46:13 +02:00
Ondrej Kozina
c4c4f9d159
Mark active device for deferred remove after decryption gets finished.
2019-10-04 12:20:34 +02:00
Ondrej Kozina
67a5ec1567
Abort reencryption initialization sooner on error.
2019-10-04 12:20:29 +02:00
Ondrej Kozina
c646832bfe
Add hard and soft memory limit to reencrypt hotzone size.
...
Currently hard memory limit is 1 GiB. Soft limit is
1/4 of system memory.
Note that --hotzone-size cryptsetup parameter can only further
lower hard and soft memory limit on hotzone size and not bypass
it.
2019-10-04 12:20:22 +02:00
Ondrej Kozina
539d4756f2
Do not flush and freeze fs while swapping in/out overlay device.
2019-10-04 12:20:16 +02:00
Ondrej Kozina
8714e115ad
Remove unused parameter from reencrypt_swap_backing_device.
...
It always loads dm-linear mapping in original device that maps 1:1
to helper overlay device (holding original table).
2019-10-04 12:20:12 +02:00
Ondrej Kozina
9c38e09ad3
Retain activation flags during and after online reencryption.
2019-10-04 12:20:06 +02:00
Ondrej Kozina
5628d7d8b5
Drop duplicite flag in LUKS2 device reload after reencryption.
...
Reload operation implicictly requires shared flag anyway and it's
added later.
2019-10-04 12:19:39 +02:00
Ondrej Kozina
5f2e8d6062
Allow LUKS2 device activation after encryption initialization.
...
It may be useful to activate device right after LUKS2 encryption
is initialized:
device is ready to use immediately even if data encryption runs in
the background for a long time
It simplifies encryption initialization during reboot.
2019-10-04 12:19:34 +02:00
Ondrej Kozina
630e336ea0
Do not allocate data device when identical with metadata device.
...
we do not need to allocate separate data device if it's equal
to metadata device during initialization.
2019-10-04 12:19:14 +02:00
Ondrej Kozina
430852736d
Cleanup crypt_init_data_device.
...
data_device can not be NULL
2019-10-04 12:19:09 +02:00
Milan Broz
4eeb741358
Report kernel FIPS mode in module version test.
2019-10-03 14:01:27 +02:00
Ondrej Kozina
bb1ce4a069
Check plain crypt device is properly aligned on activation.
2019-10-02 13:40:10 +02:00
Ondrej Kozina
5e3e4a225e
Check resize operation is aligned to device logical size.
...
Fixes #486 .
2019-10-01 12:41:43 +02:00
Ondrej Kozina
583d05e32a
Fix upconversion to LUKS2 with detached header.
...
The check for enough space before moving keyslots data did not expect real
detached header size to be less than aligned LUKS1 header size.
Also if detached header is placed in regular file we can grow so that
moved keyslots area fit the file.
Fixes #445 .
2019-09-09 19:01:01 +02:00
Ondrej Kozina
2c0914b2ba
Fix LUKS2 reencryption recovery test.
...
Fix corner case when head or tail of test device is remapped
to error target for writes.
2019-09-09 14:07:30 +02:00
Milan Broz
3ebedfe7b0
Update readme.md.
2019-09-06 13:13:44 +02:00
Milan Broz
1af2f85d43
Fix Release notes.
v2.2.1
2019-09-06 12:49:31 +02:00
Milan Broz
0395e8935a
Version 2.2.1.
2019-09-06 11:21:15 +02:00