=== nxvl_ is now known as nxvl [08:17] cjwatson: should the gtk-frontend work yet? I get a DirectFBError when it tries to initialize the screen [10:38] tjaalton: that's known, thanks [10:39] tjaalton: gtk/directfb needs some work ... [15:53] i was banned from #ubuntu-es [15:54] how can i fix it [15:54] ? [16:10] (congratulations, now you're banned from another channel for trying to use it as a stunningly inappropriate escalation method) [16:14] heh [18:00] evand: hiya [18:01] evand: i just tried the daily iso for encrypted home ... there's at least two issues [18:01] evand: rtg is working on the kernel module issue [18:01] evand: it seems that they need the kernel crypto modules as well as the ecryptfs filesystem module [18:01] evand: he says that he's going to take care of that [18:02] evand: additionally, however, ecryptfs-utils did not get installed, when I selected "encrypted home" [18:19] cjwatson: why does the server iso boot a generic kernel? [18:40] kirkland: too much effort to build a separate d-i for the server kernel, and relatively little value [18:41] kirkland: I agree with apw that ecryptfs should be loaded outside the chroot if it's to be used in the installer, which means that it will need to be made available in a udeb [18:42] kirkland: relying on modprobe in the target system from the installer is always wrong [18:42] cjwatson: understood. [18:46] cjwatson: okay, i'm struggling a bit in the installer, with the encrypted-home option [19:39] kirkland: oh? [19:40] cjwatson: i need to actually perform the ecryptfs mount in the chroot'd target [19:40] cjwatson: such that the /etc/skel gets copied into the ecryptfs mountpoint [19:41] cjwatson: that's proving to be more difficult than i though, with current iso's [19:41] cjwatson: seems that the next kernel (-3) will have ecryptfs and aes built in [19:41] cjwatson: hopefully that one will work better [19:42] the other option would've been to put the modules in the crypto-modules udeb [19:42] that would have been my suggestion, actually [19:42] then user-setup could anna-install crypto-modules and modprobe ecryptfs [19:42] cjwatson: hmm, yeah, that one i didn't think of [19:42] cjwatson: the server installer has the ecryptfs.ko [19:42] can you mention that alternative possibility to the kernel team? [19:42] cjwatson: but the alternate does not [19:42] err [19:42] where does it have ecryptfs.ko? [19:43] cjwatson: /lib/modules/..../kernel/fs [19:43] in the target system you mean? [19:43] cjwatson: no [19:43] cjwatson: in the installer / [19:43] cjwatson: it's in -generic in the installer, but in -server in the target system [19:43] well, they're the same installer ... [19:44] cjwatson: i pull today's server and alternate iso's [19:44] cjwatson: find / | ecryptfs [19:44] cjwatson: shows different results [19:45] well that's just bizarre [19:46] in order for that to happen, ecryptfs.ko would have to be in some udeb [19:46] and, according to the archive, it isn't ... [19:48] debian-installer: cjwatson * r1007 ubuntu/ (4 files in 2 dirs): Move mainline architectures to 2.6.28-3 kernels. [19:52] cjwatson: okay, i'm seeing really different behavior between alternate and server iso's [19:53] cjwatson: on alternate, i can't get past configuring-apt [19:53] cjwatson: i dropped to a shell, chroot'd to target, and tried to apt-get install ecryptfs-utils, but it can't [19:54] is this an unmodified system - i.e. one where I could reproduce the problem? [19:54] you should use apt-install in the installer for installing extra packages in /target, in general [19:55] cjwatson: yes, very reproducible [19:55] cjwatson: i'll try apt-install [19:55] cjwatson: i would much appreciate your help, as I was sort of hoping for this to make alpha-2 [19:55] i targeted all of the bugs/patches at alpha2 [19:55] that can be adjusted, i suppose [19:57] cjwatson: so i'm running today's alternate 64-bit jaunty installer 41ce2c80ebd9ec94cfc44f19f0f49842 [19:57] cjwatson: default on all questions up to the username/password [19:57] cjwatson: i select "Yes" for encrypt home, which does not succeed, however, the user is not warned [19:57] (at least at that point) [19:57] I'll be attempting it on i386 for practicality reasons [19:58] cjwatson: fair enough [20:00] cjwatson: okay, i just got through the user pages [20:01] (I'm waiting for jigdo to download all this) [20:02] cjwatson: okay, i got a red-page failure, on "Select and install software" [20:02] check syslog [20:03] libnewt0.52 doesn't exist [20:03] ok, the bustage has probably not got much to do with your changes [20:04] right, so now i'll drop to a shell [20:04] mount -o bind /dev /target/dev [20:04] mount -o bind /sys /target/sys [20:04] mount -o bind /proc /target/proc [20:04] right? [20:05] I guess [20:06] well, it seems it needs at least sys and proc [20:06] chroot /target [20:06] bash [20:06] lsmod | grep ecryptfs = nothing [20:06] modprobe ecryptfs -> success [20:07] modprobe aes -> success [20:07] right, not guaranteed though [20:07] that'll break in -server [20:07] you're just lucky this time [20:07] definitely true [20:07] cjwatson: well, in the server, i can do this outside of the chroot [20:08] b/c those .ko's are available [20:08] not so in the alternate install [20:08] i must do it in the /target [20:08] (a) I still don't see how that's possible with current images (b) kernel bug, those modules *should* be made available outside of the chroot, as I said above and on #kernel [20:09] cjwatson: fair enough on that point -- it's something that will need to be worked around [20:10] cjwatson: worked around, for now, as you said, "I'm lucky" ... can't rely on that [20:10] cjwatson: so now, in the chroot /target, i need to install ecryptfs-utils [20:10] apt-install -> command not found (only available outside the chroot?) [20:11] apt-get install (doesn't work either, no installation candidate) [20:11] apt-install is only available outside the chroot [20:11] is ecryptfs-utils on the CD? [20:11] only CD sources are available at that point [20:11] cjwatson: yes on the server, no on the alternate [20:12] ok, seed change needed then [20:13] cjwatson: okay, so for now, i'll scp them in [20:17] cjwatson: okay, so now i've got the userspace utilities, and their (defined) dependencies [20:17] cjwatson: trying a test mount within the target chroot fails, with the following in syslog: [20:18] mount.ecryptfs: Error initializing the key module [/usr/lib/ecryptfs/libecryptfs_key_mod_gpg.so] ... which is an error thrown inside the ecryptfs mount helper [20:18] possible a library is missing [20:19] hmm, but that's odd.... [20:19] we're using passphrase [20:26] cjwatson: it seems that the kernel is very displeased when trying to initialize the aes cipher [21:38] debian-installer: cjwatson * r1008 ubuntu/debian/changelog: releasing version 20081029ubuntu5