[dm-crypt] Re: veritysetup and CentOS 8

["Wei, Catherine" <catherine.wei@commscope.com>]

[-- Attachment #1.1: Type: text/plain, Size: 3026 bytes --]

Hi if you have answers to the questions in following email, please let me know. Really appreciate if you’d help.

Best regards,
Catherine

From: Wei, Catherine
Sent: 2021年10月18日 15:02
To: Milan Broz <gmazyland@gmail.com>
Subject: RE: [dm-crypt] veritysetup and CentOS 8

Hi Broz.
The reason we don’t want to use cryptsetup 2.0 is that it required new libs such as “json-c” and now many of our build servers haven’t install this library, and it also need us to make some modifications on gcc in the build servers.
We have only one centos 8 build server, and many centos 7 build servers. In CentOS 7 build server, the veritysetup (1.7.5) could run, but not on the one CentOS 8.

So we prefer to modify the only CentOS 8 to make the veritysetup command works instead of update all the CentOS 7 servers.


Regarding the
> Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC).

We run commands like this:
“veritysetup format --no-superblock $our_rootdisk $verity_hashdevice”

The veritysetup command was built from cryptsetup 1.7.5. Does this command require special support from kernel such as FEC support for dm-verity?


Best regards,
Catherine

From: Milan Broz <gmazyland@gmail.com<mailto:gmazyland@gmail.com>>
Sent: 2021年10月15日 16:27
To: Wei, Catherine <catherine.wei@commscope.com<mailto:catherine.wei@commscope.com>>
Subject: Re: [dm-crypt] veritysetup and CentOS 8

On 14/10/2021 10:23, Wei, Catherine wrote: > Hi all, > > I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it report
Caution: External (gmazyland@gmail.com<mailto:gmazyland@gmail.com>)
First-Time Sender   Details<https://shared.outlook.inky.com/details?id=Y29tbXNjb3BlL2NhdGhlcmluZS53ZWlAY29tbXNjb3BlLmNvbS80NTI1ZjE0ZjhjNjUxNDkxOGExYzFmODY3MzA1ZDdlOS8xNjM0Mjg2NDQ3Ljc1#key=27420ad8a6087eb0deb487e7bba8aa5c>
  Report This Email<https://shared.outlook.inky.com/report?id=Y29tbXNjb3BlL2NhdGhlcmluZS53ZWlAY29tbXNjb3BlLmNvbS80NTI1ZjE0ZjhjNjUxNDkxOGExYzFmODY3MzA1ZDdlOS8xNjM0Mjg2NDQ3Ljc1#key=27420ad8a6087eb0deb487e7bba8aa5c>  FAQ<https://www.inky.com/banner-faq/>  Protection by INKY<https://www.inky.com>


On 14/10/2021 10:23, Wei, Catherine wrote:

> Hi all,

>

> I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it reported error:

>

>

>

> veritysetup: /lib64/libc.so.6: version `GLIBC_2.28' not found (required by veritysetup)



This cannot happen, if you compile it properly.



Just use provided version from CentOS repo.



Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC).



Anyway, this is upstream list, version 1.7.5 is 4 years old, why are you using that?

(CentOS8 stream repo provides 2.3.3, at least).



Milan

[-- Attachment #1.2: Type: text/html, Size: 10305 bytes --]

[-- Attachment #2: Type: text/plain, Size: 147 bytes --]

_______________________________________________
dm-crypt mailing list -- dm-crypt@saout.de
To unsubscribe send an email to dm-crypt-leave@saout.de