From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 18 Nov 2024 07:10:13 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-lj1-f184.google.com (mail-lj1-f184.google.com [209.85.208.184]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 4AI6ACL1025107 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 18 Nov 2024 07:10:12 +0100 Received: by mail-lj1-f184.google.com with SMTP id 38308e7fff4ca-2ff57668191sf19891861fa.1 for ; Sun, 17 Nov 2024 22:10:12 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1731910207; cv=pass; d=google.com; s=arc-20240605; b=Rq6WNA9/o9irFX5sFu3D0IQezzOgM36Wibj2gEpQqps1I7y36vgAp74JCz5+QdLzDy Pcrau1a3Oc8tc9b3VJBOwxmPI2Ab8YUBCHPTfP0W6LN0DBD01fSx62FeFYc2UBazI+Mf j5yDBo6i6gIY3w0LZB2XlNlmP8ZW5nJzt9QWDtJXqsJyEElBd9oR+q24zxE7cEOQfLvE hu0B5w7r71aPUNuYWHrbQKnJXdEGwprAdn3VLmDyO9uEqOLACpMcu0CeARBFCvsBPNcy 3aCBuOTuTkMcpQz/zu91PT9SspkKyY1weGW1KE3e8hMgY08MmQm+76j16rfccly0QqIF tjBw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:mime-version:user-agent :content-transfer-encoding:references:in-reply-to:date:to:from :subject:message-id:sender:dkim-signature; bh=c+BqAEIm3PV+g55Yp4UzpKjBWgLJPXhqQW8njJyR1rU=; fh=0JBLB8H/KWjoQ23iZBc+p2nldfChZoOA98zQXXqFevM=; b=ACfCJk4ZyZuMtsqm+4zcal7XxyvRQ2glrmwywr1gc42VHrLu7KZ+vYwpCrMN2vU9yQ Jr2bauVmy5nxansSQ4+lBre+8YF8wNNFZ0AdRO9bnzr6Gq4p/zVkeWbovrb7VjMUQCXM 4vp5WITR0x6Qy8z40tHZf/sAIerd9Bc8HT5YQf7PV8FKmhJ3XiQYITzu+24+y7pOFxbA +Gj3cT6GDTbsJKSk6N/kHHW+9zFqexOz75QxmXEjxmcl1Gi8ESOgDJ9sexTdSvakrXyD YxZLF1RNVzifqYuvRFDIlIcWfCU5pAFZSot9DmdYdKlZjCk7Uyg40tG8H6owlFGN987s lbkg==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of ubely@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=ubely@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1731910207; x=1732515007; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:mime-version:user-agent:content-transfer-encoding :references:in-reply-to:date:to:from:subject:message-id:sender:from :to:cc:subject:date:message-id:reply-to; bh=c+BqAEIm3PV+g55Yp4UzpKjBWgLJPXhqQW8njJyR1rU=; b=DXeGiT35RlNxlHl42pfKgNmewGlVOsIJWp25ne/mQs5HzE3rapBFelnULVOGB0b3DG qGqOX+KJJdL5wQfJkE+SbXVlAwM5ovmQ2MjyZpPexx327BrUIlpCbDKFgPGV1/oUmoJE yxbKv918xauRu7gvcyWes5szEUpnkhlY3MTD6TUlYexJB0GPKR/hvKzPeprfmlQbsdHn pM/pxQTCIEk12V5aU4KtMq+uO9bzywwc18MjWIKhOCipU/Zh5fal28tOjALpq2nhdOUr MEuJk6VbKF8JQR9D3mAauxnepWBjGv0D1UqFyNVFHcNvG7Tg7gJwto7WGprf5+SSlBbx 4EcQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1731910207; x=1732515007; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:mime-version :user-agent:content-transfer-encoding:references:in-reply-to:date:to :from:subject:message-id:x-beenthere:x-gm-message-state:sender:from :to:cc:subject:date:message-id:reply-to; bh=c+BqAEIm3PV+g55Yp4UzpKjBWgLJPXhqQW8njJyR1rU=; b=k9nH68Nya/pPQbQ/e4Ak5uDS+7s5exn7hW1qDKTZMSFdoZraQwiUJVhbLIQtR8JOGL VIF/YKfmEOzgwxklbfM+d3ojSB0h7FjbVWbHDE2BvtE33VIfKkzTM+l1AK8TrzrJpJ1X dVv6EY8P4Ihsqro+Yf/dKp8OGup9WweQJGF4plzdtggzxCkdoA2VRsXs917vRSEyPSbc SOf+zOauV+4okGmxUa45NUPr4xj0VN23pPHSjDd5SN0PiMLnfX7iy3VXI9ilFH/j4so/ /FpqQ6KTI1DpJG5wVWD3On3H4UVm5ds+uH6JqWPG3362BtL2hhKt/1WfZ6B5ddzbaWAW ReCg== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCVPM98lmXplpst/XrLDycQ/vYR/zA/MoVPRxd6WVmmVMKfJ8kTgCF2M6DSL79HyW5KfgLk/@ilbers.de X-Gm-Message-State: AOJu0YxZkigr1aB6Sl6IxnE2jW6fpNsLI27WVP8xAiE/ZakI+TNJRS3V RO0mrkfRonBVGpUOu4roehZila6iXm/HepDrfUI2nHkXWjtfSJM8 X-Google-Smtp-Source: AGHT+IHta/t5mz1Z9hhV8O+vORBeABMJ+PJ6FwsYuG8bClHKTU5tE7597KYhrtn4tHXA9JGH5ZDu3g== X-Received: by 2002:a2e:a883:0:b0:2ff:5d45:883d with SMTP id 38308e7fff4ca-2ff606937e2mr29690921fa.13.1731910206145; Sun, 17 Nov 2024 22:10:06 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a2e:a0d4:0:b0:2ff:5752:ae1d with SMTP id 38308e7fff4ca-2ff5752af04ls6107791fa.1.-pod-prod-00-eu; Sun, 17 Nov 2024 22:10:03 -0800 (PST) X-Forwarded-Encrypted: i=2; AJvYcCUahQmaYKuWGbKA6ACji8CaYAtbaErY3OZZh/+rKHGHQ2JM8Er5La7znEIyigFY+Gf46d/JgLSDvc5g@googlegroups.com X-Received: by 2002:a2e:be05:0:b0:2f7:6062:a0a9 with SMTP id 38308e7fff4ca-2ff60665f43mr30977761fa.7.1731910203549; Sun, 17 Nov 2024 22:10:03 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1731910203; cv=none; d=google.com; s=arc-20240605; b=gzB/mwcnoeDCo9w1BArSMoSMemBmVAeRKl8YUWZezr5Js6DL1Nu3XVCGGB2wwR1y+i QtvoOpZY+ckZf1PokH4RtFTcj5wsK/ILW1EMt27gnRLuRsoOoPsWfecqXARuuJ4p+ku+ LVoChmfiPkiSvz10jgDmJhb0PGdWxiy/t1FIsc0KE+PHG7f/Cia7cdtaGLKM728KD8ZA mjY/bw02ZYv86TA27TGOpfSsum55MAnQDJduRMiS03W4k5QmiXWFhjUVtyVGJKlvFbFi W5Odse9hgVA2VS9HbqPw49BALD8Kxe69vnlNyWbQiySmU6QbQzCZ8JoyARcslLfJfDPn PZMQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:to:from:subject:message-id; bh=2wpWTl1If1+qwYRgBemRTBHfb7n8wdrN+ml4OqOQow4=; fh=IxbeHM4vWxalf1XNf2rnGcQL+r1v0Lr0C6ICsGNNkYw=; b=RMXO7fmgeWC9whq3G/vt+yzRB73/O/22daeKSGhWykbSIhkiQEdRL0tlb9oAGd1jv/ AMSkNfpfe1/gY26tLIgc9EPbSWlxWiQpeup/ZTgXNrisWlCli7rcgmiIHT6k4eXPaRM9 WEwAtZGJK+noNgW+nTTayGk5Ke+o13zp4z60MDn9e+TA+3GAEfmqS55+p9MyBq3p1vtv OTmy158Vdtf8oB2H+iznRaXFdHBsFII9m7QTUvhcVafx/o1Png4WiJgHVxqaCjkUIWkd +5r6JdIAKPp0KblkFaHrb4dNohHV06mpOy1UcW14LnapfNQWf0wI+17vlhnVeRtlPbzR NpwA==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of ubely@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=ubely@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id 38308e7fff4ca-2ff69847ae0si799521fa.1.2024.11.17.22.10.03 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Sun, 17 Nov 2024 22:10:03 -0800 (PST) Received-SPF: pass (google.com: domain of ubely@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from [127.0.0.1] (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 4AI6A0OM025094 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 18 Nov 2024 07:10:02 +0100 Message-ID: <4249afea0d8a06f616b31e723a858d8d595aa58f.camel@ilbers.de> Subject: Re: [PATCH 1/2] Revert "meta: Add option to specify additional dependencies for package expand-on-first-boot in case an encrypted disk has to be resized" From: Uladzimir Bely To: Jan Kiszka , isar-users Date: Mon, 18 Nov 2024 09:10:00 +0300 In-Reply-To: <5b0f1ad9-3d12-4d05-a5e4-bb9dcf258545@siemens.com> References: <5b0f1ad9-3d12-4d05-a5e4-bb9dcf258545@siemens.com> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.54.0 (by Flathub.org) MIME-Version: 1.0 X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: ubely@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of ubely@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=ubely@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: JG2oqumuEfPA On Fri, 2024-11-08 at 12:27 +0100, 'Jan Kiszka' via isar-users wrote: > From: Jan Kiszka >=20 > This reverts commit 8b30a4f86cb3ea3369bff3884141872c3a7d9979. >=20 > On second thought, this approach turned out to be inapplicable on the > long-run. It is built around the assumption that the disk encryption > secret is still accessible after initramfs used it to unload the > disk. > While the downstream implementation of cip-core currently fulfills > this, > it is not expected to stay like that because of the increase attack > surface. >=20 > We will need a different solution for expanding encrypted partitions, > most likely with the help of the encryption hook in the initramfs. >=20 > Signed-off-by: Jan Kiszka > --- > =C2=A0.../expand-on-first-boot_1.5.bb=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 | 14 +----------- > -- > =C2=A01 file changed, 1 insertion(+), 13 deletions(-) >=20 > diff --git a/meta/recipes-support/expand-on-first-boot/expand-on- > first-boot_1.5.bb b/meta/recipes-support/expand-on-first-boot/expand- > on-first-boot_1.5.bb > index 2596706d..4b9cf376 100644 > --- a/meta/recipes-support/expand-on-first-boot/expand-on-first- > boot_1.5.bb > +++ b/meta/recipes-support/expand-on-first-boot/expand-on-first- > boot_1.5.bb > @@ -10,19 +10,7 @@ inherit dpkg-raw > =C2=A0DESCRIPTION =3D "This service grows the last partition to the full > medium during first boot" > =C2=A0MAINTAINER =3D "isar-users " > =C2=A0 > -# Additional packages that are needed to resize the disk if it is > encrypted. > -ADDITIONAL_DISK_ENCRYPTION_PACKAGES ?=3D "" > -DEBIAN_DEPENDS =3D " \ > -=C2=A0=C2=A0=C2=A0 systemd, \ > -=C2=A0=C2=A0=C2=A0 sed, \ > -=C2=A0=C2=A0=C2=A0 grep, \ > -=C2=A0=C2=A0=C2=A0 coreutils, \ > -=C2=A0=C2=A0=C2=A0 mount, \ > -=C2=A0=C2=A0=C2=A0 e2fsprogs, \ > -=C2=A0=C2=A0=C2=A0 fdisk (>=3D2.29.2-3) | util-linux (<2.29.2-3), \ > -=C2=A0=C2=A0=C2=A0 util-linux, \ > -=C2=A0=C2=A0=C2=A0 ${ADDITIONAL_DISK_ENCRYPTION_PACKAGES} \ > -=C2=A0=C2=A0=C2=A0 " > +DEBIAN_DEPENDS =3D "systemd, sed, grep, coreutils, mount, e2fsprogs, > fdisk (>=3D2.29.2-3) | util-linux (<2.29.2-3), util-linux" > =C2=A0 > =C2=A0SRC_URI =3D " \ > =C2=A0=C2=A0=C2=A0=C2=A0 file://expand-on-first-boot.service=C2=A0\ > --=20 > 2.43.0 >=20 Applied to next, thanks. --=20 Best regards, Uladzimir. --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 4249afea0d8a06f616b31e723a858d8d595aa58f.camel%40ilbers.de.