summaryrefslogtreecommitdiffstats
path: root/docs/v1.4.2-ReleaseNotes
blob: 9dbeb46a803459f42a8ef7451a0b2aa742fb4c2b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
Cryptsetup 1.4.2 Release Notes
==============================

Changes since version 1.4.1

* Add --keyfile-offset and --new-keyfile-offset parameters to API and CLI.
  These options can be used to skip start of keyfile or device used as keyfile.

* Add repair command and crypt_repair() for known LUKS metadata problems repair.

  Some well-known LUKS metadata corruptions are easy to repair, this
  command should provide a way to fix these problems.

  Always create binary backup of header device before running repair,
  (only 4kB - visible header) for example by using dd:
     dd if=/dev/<LUKS header device> of=repair_bck.img bs=1k count=4

  Then you can try to run repair:
     cryptsetup repair <device>

 Note, not all problems are possible to repair and if keyslot or some header
 parameters are overwritten, device is lost permanently.

* Fix header check to support old (cryptsetup 1.0.0) header alignment.
  (Regression in 1.4.0)

* Allow to specify --align-payload only for luksFormat.

* Add --master-key-file option to luksOpen (open using volume key).

* Support UUID=<LUKS_UUID> format for device specification.
  You can open device by UUID (only shortcut to /dev/disk/by-uuid/ symlinks).

* Support password verification with quiet flag if possible. (1.2.0)
  Password verification can be still possible if input is terminal.

* Fix retry if entered passphrases (with verify option) do not match.
  (It should retry if requested, not fail.)

* Fix use of empty keyfile.

* Fix error message for luksClose and detached LUKS header.

* Allow --header for status command to get full info with detached header.