Changing LUKS passphrase

[ghost]

Moved from freepto-lb repository: AvANa-BBS/freepto-lb#108

Feature Description:

Enabled the LUKS passphrase change.
This feature has been implemented using freepto-usb-utils tool: https://github.com/AvANa-BBS/freepto-usb-utils

The following commits should be integrated in the main repository:
vinc3nt/freepto-passwords-changer@2021afd
vinc3nt/freepto-passwords-changer@fde7d81

[boyska]

The code seems ok. Need to test, looks very good!

[boyska]

How can we make freepto user test?

Proposal A) We probably need to move this into berenjena repositories, have a berenjena early user upgrade it, and test it.

Proposal B) Create a debian package for this, put it somewhere and let user install it. But how can they do it securely? We can let them add the berenjena repository with very low pinning priority, then running

apt-get install -t berenjena freepto-passwords-changer

[paskao]

We can build a first alpha image for berenjena, setup repository and publish it. So people can test this feature and all the others that need tests.

[boyska]

Ok paskao, this seems very good to me. I also propose to make the image already containing a persistence partition, and having the syslinux menu without the removable-usb thing. This mean that testing in qemu can be done.
So this is

1. building a .deb of this
2. putting it inside a new build of berenjena
3. appending some megabytes of /dev/zero at the end of the .img
4. creating the persistence partition (this is the hardest part!)
5. removing the removable-usb thing
6. publishing it
7. writing a RFT

[paskao]

Ok for me. This can simplify the test work.

[boyska]

also see http://linux.die.net/man/8/kpartx

[ghost]

How to test

Virtualization: ok
Freepto image: download for kvm/qemu - download for virtualbox
Needed: kvm/qemu or virtualbox
Steps:

• launch freepto and mount the persistence: during the boot phase the system will ask you for the luks password (that is "freepto")
• from the freepto menu launch "freepto-password-changer" (the program will ask you for the user (paranoid) password that is "live")
• change the luks password
• reboot freepto
• put the new luks password during the boot

[boyska]

while test with virtualization is surely fine, I think that testing with "real hardware" is appreciated, since there could be issues with /proc/mounts parsing. I don't think they are very probable, but anyway...

[boyska]

tested on qemu, works great!