Bug 697148 - F15 installer, encrypted swap wanted, can't select ephemeral key
Summary: F15 installer, encrypted swap wanted, can't select ephemeral key
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: anaconda
Version: 15
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ---
Assignee: Anaconda Maintenance Team
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-04-16 07:19 UTC by Bruce O. Benson
Modified: 2011-04-18 14:13 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-04-18 14:13:57 UTC
Type: ---


Attachments (Terms of Use)

Description Bruce O. Benson 2011-04-16 07:19:43 UTC
Description of problem:

When installing Fedora 15 on x86_64, and an encrypted swap partition is selected to be used, there is no choice offered for fixed passphrase key vs. ephemeral (random) key.  Once user selects 'next', installer wants user to make up a passphrase, and there is no choice offered for a no-passphrase random key type here as well.  i.e. it will set /etc/crypttab to use some passphrase for field 3, instead of /dev/urandom.


Steps to Reproduce:
1. Install Fedora 15
2. Manual disk install on a normal SATA disk 
3. Do anything to make multiple partitions.
3. Select anything for the root.
4. Select a partition to be swap.
5. Select 'encrypted'.
6. Select next.
7. It wants a passphrase.
8. User wants to use disposable /dev/urandom key managed by dm-crypt.
  
Actual results:

Have to select a passphrase, and change /etc/crypttab later, or just set the whole thing up later.

Expected results:

A checkbox that says "use random (no passphrase) key for swap "

Additional info:

Thanks!

Comment 1 David Lehman 2011-04-18 14:13:57 UTC
This is not something we plan to support in the near future. The very few users who want this option can enable it after installation. For the rest of users it is just more clutter and/or confusing options in an already-complex user interface.


Note You need to log in before you can comment on or make changes to this bug.