* [dm-crypt] veritysetup and CentOS 8
@ 2021-10-14 8:23 Wei, Catherine
2021-10-15 8:32 ` [dm-crypt] " Milan Broz
[not found] ` <68390b56-e5b7-7f3c-74a7-6edad253df08@gmail.com>
0 siblings, 2 replies; 7+ messages in thread
From: Wei, Catherine @ 2021-10-14 8:23 UTC (permalink / raw)
To: dm-crypt
[-- Attachment #1.1: Type: text/plain, Size: 477 bytes --]
Hi all,
I found that the veritysetup built from cryptsetup-1.7.5 couldn't work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it reported error:
veritysetup: /lib64/libc.so.6: version `GLIBC_2.28' not found (required by veritysetup)
Could you tell me what could be the reasons and how to fix that? It seems the Glibc 2.28 is installed by default in CentOS 8(I'm checking this since the server is not here currently).
Best regards,
Catherine
[-- Attachment #1.2: Type: text/html, Size: 3616 bytes --]
[-- Attachment #2: Type: text/plain, Size: 147 bytes --]
_______________________________________________
dm-crypt mailing list -- dm-crypt@saout.de
To unsubscribe send an email to dm-crypt-leave@saout.de
^ permalink raw reply [flat|nested] 7+ messages in thread* [dm-crypt] Re: veritysetup and CentOS 8 2021-10-14 8:23 [dm-crypt] veritysetup and CentOS 8 Wei, Catherine @ 2021-10-15 8:32 ` Milan Broz [not found] ` <68390b56-e5b7-7f3c-74a7-6edad253df08@gmail.com> 1 sibling, 0 replies; 7+ messages in thread From: Milan Broz @ 2021-10-15 8:32 UTC (permalink / raw) To: dm-crypt On 14/10/2021 10:23, Wei, Catherine wrote: > Hi all, > > I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it reported error: > > > > veritysetup: /lib64/libc.so.6: version `GLIBC_2.28' not found (required by veritysetup) This cannot happen, if you compile it properly. Just use provided version from CentOS repo. Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). Anyway, this is upstream list, version 1.7.5 is 4 years old, why are you using that? (CentOS8 stream repo provides 2.3.3, at least). Milan _______________________________________________ dm-crypt mailing list -- dm-crypt@saout.de To unsubscribe send an email to dm-crypt-leave@saout.de ^ permalink raw reply [flat|nested] 7+ messages in thread
[parent not found: <68390b56-e5b7-7f3c-74a7-6edad253df08@gmail.com>]
[parent not found: <PH0PR14MB4535EFBF30DF57ECB89E5E06EDBC9@PH0PR14MB4535.namprd14.prod.outlook.com>]
* [dm-crypt] Re: veritysetup and CentOS 8 [not found] ` <PH0PR14MB4535EFBF30DF57ECB89E5E06EDBC9@PH0PR14MB4535.namprd14.prod.outlook.com> @ 2021-10-26 8:07 ` Wei, Catherine 2021-10-26 8:13 ` Wei, Catherine 0 siblings, 1 reply; 7+ messages in thread From: Wei, Catherine @ 2021-10-26 8:07 UTC (permalink / raw) To: Milan Broz, dm-crypt [-- Attachment #1.1: Type: text/plain, Size: 3026 bytes --] Hi if you have answers to the questions in following email, please let me know. Really appreciate if you’d help. Best regards, Catherine From: Wei, Catherine Sent: 2021年10月18日 15:02 To: Milan Broz <gmazyland@gmail.com> Subject: RE: [dm-crypt] veritysetup and CentOS 8 Hi Broz. The reason we don’t want to use cryptsetup 2.0 is that it required new libs such as “json-c” and now many of our build servers haven’t install this library, and it also need us to make some modifications on gcc in the build servers. We have only one centos 8 build server, and many centos 7 build servers. In CentOS 7 build server, the veritysetup (1.7.5) could run, but not on the one CentOS 8. So we prefer to modify the only CentOS 8 to make the veritysetup command works instead of update all the CentOS 7 servers. Regarding the > Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). We run commands like this: “veritysetup format --no-superblock $our_rootdisk $verity_hashdevice” The veritysetup command was built from cryptsetup 1.7.5. Does this command require special support from kernel such as FEC support for dm-verity? Best regards, Catherine From: Milan Broz <gmazyland@gmail.com<mailto:gmazyland@gmail.com>> Sent: 2021年10月15日 16:27 To: Wei, Catherine <catherine.wei@commscope.com<mailto:catherine.wei@commscope.com>> Subject: Re: [dm-crypt] veritysetup and CentOS 8 On 14/10/2021 10:23, Wei, Catherine wrote: > Hi all, > > I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it report Caution: External (gmazyland@gmail.com<mailto:gmazyland@gmail.com>) First-Time Sender Details<https://shared.outlook.inky.com/details?id=Y29tbXNjb3BlL2NhdGhlcmluZS53ZWlAY29tbXNjb3BlLmNvbS80NTI1ZjE0ZjhjNjUxNDkxOGExYzFmODY3MzA1ZDdlOS8xNjM0Mjg2NDQ3Ljc1#key=27420ad8a6087eb0deb487e7bba8aa5c> Report This Email<https://shared.outlook.inky.com/report?id=Y29tbXNjb3BlL2NhdGhlcmluZS53ZWlAY29tbXNjb3BlLmNvbS80NTI1ZjE0ZjhjNjUxNDkxOGExYzFmODY3MzA1ZDdlOS8xNjM0Mjg2NDQ3Ljc1#key=27420ad8a6087eb0deb487e7bba8aa5c> FAQ<https://www.inky.com/banner-faq/> Protection by INKY<https://www.inky.com> On 14/10/2021 10:23, Wei, Catherine wrote: > Hi all, > > I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it reported error: > > > > veritysetup: /lib64/libc.so.6: version `GLIBC_2.28' not found (required by veritysetup) This cannot happen, if you compile it properly. Just use provided version from CentOS repo. Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). Anyway, this is upstream list, version 1.7.5 is 4 years old, why are you using that? (CentOS8 stream repo provides 2.3.3, at least). Milan [-- Attachment #1.2: Type: text/html, Size: 10305 bytes --] [-- Attachment #2: Type: text/plain, Size: 147 bytes --] _______________________________________________ dm-crypt mailing list -- dm-crypt@saout.de To unsubscribe send an email to dm-crypt-leave@saout.de ^ permalink raw reply [flat|nested] 7+ messages in thread
* [dm-crypt] Re: veritysetup and CentOS 8 2021-10-26 8:07 ` Wei, Catherine @ 2021-10-26 8:13 ` Wei, Catherine 2021-10-30 10:19 ` Milan Broz 0 siblings, 1 reply; 7+ messages in thread From: Wei, Catherine @ 2021-10-26 8:13 UTC (permalink / raw) To: Milan Broz, dm-crypt [-- Attachment #1.1: Type: text/plain, Size: 3565 bytes --] Additional info: We use this options to build the cryptsetup 1.7.5: --disable-shared \ --disable-dependency-tracking \ --disable-selinux \ --disable-nls \ --disable-udev \ --disable-kernel_crypto \ --with-crypto_backend=openssl Best regards, Catherine From: Wei, Catherine Sent: 2021年10月26日 16:08 To: 'Milan Broz' <gmazyland@gmail.com>; 'dm-crypt@saout.de' <dm-crypt@saout.de> Subject: RE: [dm-crypt] veritysetup and CentOS 8 Hi if you have answers to the questions in following email, please let me know. Really appreciate if you’d help. Best regards, Catherine From: Wei, Catherine Sent: 2021年10月18日 15:02 To: Milan Broz <gmazyland@gmail.com<mailto:gmazyland@gmail.com>> Subject: RE: [dm-crypt] veritysetup and CentOS 8 Hi Broz. The reason we don’t want to use cryptsetup 2.0 is that it required new libs such as “json-c” and now many of our build servers haven’t install this library, and it also need us to make some modifications on gcc in the build servers. We have only one centos 8 build server, and many centos 7 build servers. In CentOS 7 build server, the veritysetup (1.7.5) could run, but not on the one CentOS 8. So we prefer to modify the only CentOS 8 to make the veritysetup command works instead of update all the CentOS 7 servers. Regarding the > Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). We run commands like this: “veritysetup format --no-superblock $our_rootdisk $verity_hashdevice” The veritysetup command was built from cryptsetup 1.7.5. Does this command require special support from kernel such as FEC support for dm-verity? Best regards, Catherine From: Milan Broz <gmazyland@gmail.com<mailto:gmazyland@gmail.com>> Sent: 2021年10月15日 16:27 To: Wei, Catherine <catherine.wei@commscope.com<mailto:catherine.wei@commscope.com>> Subject: Re: [dm-crypt] veritysetup and CentOS 8 On 14/10/2021 10:23, Wei, Catherine wrote: > Hi all, > > I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it report Caution: External (gmazyland@gmail.com<mailto:gmazyland@gmail.com>) First-Time Sender Details<https://shared.outlook.inky.com/details?id=Y29tbXNjb3BlL2NhdGhlcmluZS53ZWlAY29tbXNjb3BlLmNvbS80NTI1ZjE0ZjhjNjUxNDkxOGExYzFmODY3MzA1ZDdlOS8xNjM0Mjg2NDQ3Ljc1#key=27420ad8a6087eb0deb487e7bba8aa5c> Report This Email<https://shared.outlook.inky.com/report?id=Y29tbXNjb3BlL2NhdGhlcmluZS53ZWlAY29tbXNjb3BlLmNvbS80NTI1ZjE0ZjhjNjUxNDkxOGExYzFmODY3MzA1ZDdlOS8xNjM0Mjg2NDQ3Ljc1#key=27420ad8a6087eb0deb487e7bba8aa5c> FAQ<https://www.inky.com/banner-faq/> Protection by INKY<https://www.inky.com> On 14/10/2021 10:23, Wei, Catherine wrote: > Hi all, > > I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it reported error: > > > > veritysetup: /lib64/libc.so.6: version `GLIBC_2.28' not found (required by veritysetup) This cannot happen, if you compile it properly. Just use provided version from CentOS repo. Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). Anyway, this is upstream list, version 1.7.5 is 4 years old, why are you using that? (CentOS8 stream repo provides 2.3.3, at least). Milan [-- Attachment #1.2: Type: text/html, Size: 13540 bytes --] [-- Attachment #2: Type: text/plain, Size: 147 bytes --] _______________________________________________ dm-crypt mailing list -- dm-crypt@saout.de To unsubscribe send an email to dm-crypt-leave@saout.de ^ permalink raw reply [flat|nested] 7+ messages in thread
* [dm-crypt] Re: veritysetup and CentOS 8 2021-10-26 8:13 ` Wei, Catherine @ 2021-10-30 10:19 ` Milan Broz 2021-11-10 6:28 ` Wei, Catherine 0 siblings, 1 reply; 7+ messages in thread From: Milan Broz @ 2021-10-30 10:19 UTC (permalink / raw) To: Wei, Catherine, dm-crypt Hi Catherine, I do not want this to sound rude, but providing commercial support for your company is not something we should do here. We test compilation of upstream cryptsetup on Centos7 and 8. All required devel packages are in associated repositories. If your build servers cannot install required packages, that is not an upstream package issue. The json-c is mandatory for LUKS2, you have to provide it for building of the upstream package. (Version 1.7.x is no longer maintained.) For FEC - no, it is not required anywhere, I just used it as an example that kernel can limit libcryptsetup functionality. Milan On 26/10/2021 10:13, Wei, Catherine wrote: > Additional info: > > We use this options to build the cryptsetup 1.7.5: > > --disable-shared \ > > --disable-dependency-tracking \ > > --disable-selinux \ > > --disable-nls \ > > --disable-udev \ > > --disable-kernel_crypto \ > > --with-crypto_backend=openssl > > Best regards, > > Catherine > > *From:*Wei, Catherine > *Sent:* 2021年10月26日16:08 > *To:* 'Milan Broz' <gmazyland@gmail.com>; 'dm-crypt@saout.de' <dm-crypt@saout.de> > *Subject:* RE: [dm-crypt] veritysetup and CentOS 8 > > Hi if you have answers to the questions in following email, please let me know. Really appreciate if you’d help. > > Best regards, > > Catherine > > *From:*Wei, Catherine > *Sent:* 2021年10月18日15:02 > *To:* Milan Broz <gmazyland@gmail.com <mailto:gmazyland@gmail.com>> > *Subject:* RE: [dm-crypt] veritysetup and CentOS 8 > > Hi Broz. > > The reason we don’t want to use cryptsetup 2.0 is that it required new libs such as “json-c”and now many of our build servers haven’t install this library, and it also need us to make some modifications on gcc in the build servers. > > We have only one centos 8 build server, and many centos 7 build servers. In CentOS 7 build server, the veritysetup (1.7.5) could run, but not on the one CentOS 8. > > So we prefer to modify the only CentOS 8 to make the veritysetup command works instead of update all the CentOS 7 servers. > > Regarding the >>Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). > > We run commands like this: > > *“veritysetup format --no-superblock $our_rootdisk $verity_hashdevice”* > > The veritysetup command was built from cryptsetup 1.7.5. Does this command require special support from kernel such as FEC support for dm-verity? > > Best regards, > > Catherine > > *From:*Milan Broz <gmazyland@gmail.com <mailto:gmazyland@gmail.com>> > *Sent:* 2021年10月15日16:27 > *To:* Wei, Catherine <catherine.wei@commscope.com <mailto:catherine.wei@commscope.com>> > *Subject:* Re: [dm-crypt] veritysetup and CentOS 8 > > On 14/10/2021 10:23, Wei, Catherine wrote: > >> Hi all, > >> > >> I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it reported error: > >> > >> > >> > >> veritysetup: /lib64/libc.so.6: version `GLIBC_2.28' not found (required by veritysetup) > > This cannot happen, if you compile it properly. > > Just use provided version from CentOS repo. > > Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). > > Anyway, this is upstream list, version 1.7.5 is 4 years old, why are you using that? > > (CentOS8 stream repo provides 2.3.3, at least). > > Milan > > > _______________________________________________ > dm-crypt mailing list -- dm-crypt@saout.de > To unsubscribe send an email to dm-crypt-leave@saout.de > _______________________________________________ dm-crypt mailing list -- dm-crypt@saout.de To unsubscribe send an email to dm-crypt-leave@saout.de ^ permalink raw reply [flat|nested] 7+ messages in thread
* [dm-crypt] Re: veritysetup and CentOS 8 2021-10-30 10:19 ` Milan Broz @ 2021-11-10 6:28 ` Wei, Catherine 2021-11-10 9:42 ` Milan Broz 0 siblings, 1 reply; 7+ messages in thread From: Wei, Catherine @ 2021-11-10 6:28 UTC (permalink / raw) To: Milan Broz, dm-crypt [-- Attachment #1.1: Type: text/plain, Size: 5400 bytes --] Thanks Broz. I understand. We just had some difficulties to upgrade the cryptsetup to 2.x version, so we want to use 1.7.5. When you said “We test compilation of upstream cryptsetup on Centos7 and 8”, which cryptsetup version did you use? 2.x version or 1.7.5 version? Best regards, Catherine From: Milan Broz <gmazyland@gmail.com> Sent: Saturday, October 30, 2021 6:19 PM To: Wei, Catherine <catherine.wei@commscope.com>; dm-crypt@saout.de Subject: Re: [dm-crypt] Re: veritysetup and CentOS 8 Hi Catherine, I do not want this to sound rude, but providing commercial support for your company is not something we should do here. We test compilation of upstream cryptsetup on Centos7 and 8. All r External (gmazyland@gmail.com<mailto:gmazyland@gmail.com>) Report This Email<https://shared.outlook.inky.com/report?id=Y29tbXNjb3BlL2NhdGhlcmluZS53ZWlAY29tbXNjb3BlLmNvbS84NThlMDI4ODc4MWVlN2I2ZDVkMTY4NGRkNzFiOWVmOS8xNjM1NTg5MTY2Ljg3#key=8e6d098de6a68dd41bf0b66347a7a939> FAQ<https://www.inky.com/banner-faq/> Protection by INKY<https://www.inky.com> Hi Catherine, I do not want this to sound rude, but providing commercial support for your company is not something we should do here. We test compilation of upstream cryptsetup on Centos7 and 8. All required devel packages are in associated repositories. If your build servers cannot install required packages, that is not an upstream package issue. The json-c is mandatory for LUKS2, you have to provide it for building of the upstream package. (Version 1.7.x is no longer maintained.) For FEC - no, it is not required anywhere, I just used it as an example that kernel can limit libcryptsetup functionality. Milan On 26/10/2021 10:13, Wei, Catherine wrote: > Additional info: > > We use this options to build the cryptsetup 1.7.5: > > --disable-shared \ > > --disable-dependency-tracking \ > > --disable-selinux \ > > --disable-nls \ > > --disable-udev \ > > --disable-kernel_crypto \ > > --with-crypto_backend=openssl > > Best regards, > > Catherine > > *From:*Wei, Catherine > *Sent:* 2021年10月26日16:08 > *To:* 'Milan Broz' <gmazyland@gmail.com<mailto:gmazyland@gmail.com>>; 'dm-crypt@saout.de' <dm-crypt@saout.de<mailto:dm-crypt@saout.de>> > *Subject:* RE: [dm-crypt] veritysetup and CentOS 8 > > Hi if you have answers to the questions in following email, please let me know. Really appreciate if you’d help. > > Best regards, > > Catherine > > *From:*Wei, Catherine > *Sent:* 2021年10月18日15:02 > *To:* Milan Broz <gmazyland@gmail.com <mailto:gmazyland@gmail.com<mailto:gmazyland@gmail.com%20%3cmailto:gmazyland@gmail.com>>> > *Subject:* RE: [dm-crypt] veritysetup and CentOS 8 > > Hi Broz. > > The reason we don’t want to use cryptsetup 2.0 is that it required new libs such as “json-c”and now many of our build servers haven’t install this library, and it also need us to make some modifications on gcc in the build servers. > > We have only one centos 8 build server, and many centos 7 build servers. In CentOS 7 build server, the veritysetup (1.7.5) could run, but not on the one CentOS 8. > > So we prefer to modify the only CentOS 8 to make the veritysetup command works instead of update all the CentOS 7 servers. > > Regarding the >>Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). > > We run commands like this: > > *“veritysetup format --no-superblock $our_rootdisk $verity_hashdevice”* > > The veritysetup command was built from cryptsetup 1.7.5. Does this command require special support from kernel such as FEC support for dm-verity? > > Best regards, > > Catherine > > *From:*Milan Broz <gmazyland@gmail.com <mailto:gmazyland@gmail.com<mailto:gmazyland@gmail.com%20%3cmailto:gmazyland@gmail.com>>> > *Sent:* 2021年10月15日16:27 > *To:* Wei, Catherine <catherine.wei@commscope.com <mailto:catherine.wei@commscope.com<mailto:catherine.wei@commscope.com%20%3cmailto:catherine.wei@commscope.com>>> > *Subject:* Re: [dm-crypt] veritysetup and CentOS 8 > > On 14/10/2021 10:23, Wei, Catherine wrote: > >> Hi all, > >> > >> I found that the veritysetup built from cryptsetup-1.7.5 couldn’t work in CentOS 8.2, when I run veritysetup command on the CentOS 8, it reported error: > >> > >> > >> > >> veritysetup: /lib64/libc.so.6: version `GLIBC_2.28' not found (required by veritysetup) > > This cannot happen, if you compile it properly. > > Just use provided version from CentOS repo. > > Also CentOS kernel has own options, not everything is available there (e.g. FEC support for dm-verity is not compiled in IIRC). > > Anyway, this is upstream list, version 1.7.5 is 4 years old, why are you using that? > > (CentOS8 stream repo provides 2.3.3, at least). > > Milan > > > _______________________________________________ > dm-crypt mailing list -- dm-crypt@saout.de<mailto:dm-crypt@saout.de> > To unsubscribe send an email to dm-crypt-leave@saout.de<mailto:dm-crypt-leave@saout.de> > [-- Attachment #1.2: Type: text/html, Size: 12728 bytes --] [-- Attachment #2: Type: text/plain, Size: 147 bytes --] _______________________________________________ dm-crypt mailing list -- dm-crypt@saout.de To unsubscribe send an email to dm-crypt-leave@saout.de ^ permalink raw reply [flat|nested] 7+ messages in thread
* [dm-crypt] Re: veritysetup and CentOS 8 2021-11-10 6:28 ` Wei, Catherine @ 2021-11-10 9:42 ` Milan Broz 0 siblings, 0 replies; 7+ messages in thread From: Milan Broz @ 2021-11-10 9:42 UTC (permalink / raw) To: Wei, Catherine, dm-crypt On 10/11/2021 07:28, Wei, Catherine wrote: > > I understand. We just had some difficulties to upgrade the cryptsetup to 2.x version, so we want to use 1.7.5. When you said “We test compilation of upstream cryptsetup on Centos7 and 8”, which cryptsetup version did you use? 2.x version or 1.7.5 version? Both released cryptsetup 1.7.5 and 2.4.1 can be compiled without any patches on recently updated CentOS7 and CentOS8-stream systems. Just you need proper devel packages installed - note 1.7.5 uses gcrypt by default, 2.x use OpenSSL, but it is configurable. (And yes, I tried it just now to be sure. :) Milan _______________________________________________ dm-crypt mailing list -- dm-crypt@saout.de To unsubscribe send an email to dm-crypt-leave@saout.de ^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2021-11-10 11:07 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-10-14 8:23 [dm-crypt] veritysetup and CentOS 8 Wei, Catherine
2021-10-15 8:32 ` [dm-crypt] " Milan Broz
[not found] ` <68390b56-e5b7-7f3c-74a7-6edad253df08@gmail.com>
[not found] ` <PH0PR14MB4535EFBF30DF57ECB89E5E06EDBC9@PH0PR14MB4535.namprd14.prod.outlook.com>
2021-10-26 8:07 ` Wei, Catherine
2021-10-26 8:13 ` Wei, Catherine
2021-10-30 10:19 ` Milan Broz
2021-11-10 6:28 ` Wei, Catherine
2021-11-10 9:42 ` Milan Broz
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).