Bug 697148

Summary: F15 installer, encrypted swap wanted, can't select ephemeral key
Product: [Fedora] Fedora Reporter: Bruce O. Benson <bbenson>
Component: anacondaAssignee: Anaconda Maintenance Team <anaconda-maint-list>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: 15CC: anaconda-maint-list, jonathan, vanmeeuwen+fedora
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-04-18 14:13:57 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Bruce O. Benson 2011-04-16 07:19:43 UTC 
Description of problem:

When installing Fedora 15 on x86_64, and an encrypted swap partition is selected to be used, there is no choice offered for fixed passphrase key vs. ephemeral (random) key.  Once user selects 'next', installer wants user to make up a passphrase, and there is no choice offered for a no-passphrase random key type here as well.  i.e. it will set /etc/crypttab to use some passphrase for field 3, instead of /dev/urandom.


Steps to Reproduce:
1. Install Fedora 15
2. Manual disk install on a normal SATA disk 
3. Do anything to make multiple partitions.
3. Select anything for the root.
4. Select a partition to be swap.
5. Select 'encrypted'.
6. Select next.
7. It wants a passphrase.
8. User wants to use disposable /dev/urandom key managed by dm-crypt.
  
Actual results:

Have to select a passphrase, and change /etc/crypttab later, or just set the whole thing up later.

Expected results:

A checkbox that says "use random (no passphrase) key for swap "

Additional info:

Thanks!
Comment 1 David Lehman 2011-04-18 14:13:57 UTC 
This is not something we plan to support in the near future. The very few users who want this option can enable it after installation. For the rest of users it is just more clutter and/or confusing options in an already-complex user interface.