diff --git a/systemd.spec b/systemd.spec
index 4fa74b59f1fc7565fe055f2e900731a66fd31493..7f9ab5631f77f867f4823fe5e7c807934f93b8a5 100644
--- a/systemd.spec
+++ b/systemd.spec
@@ -21,7 +21,7 @@
 Name:           systemd
 Url:            https://systemd.io/
 Version:        249
-Release:        76
+Release:        77
 License:        MIT and LGPLv2+ and GPLv2+
 Summary:        System and Service Manager
 
@@ -885,6 +885,14 @@ Requires:       %{name} = %{version}-%{release}
 %description pam
 Systemd PAM module registers the session with systemd-logind.
 
+%package cryptsetup
+Summary:          systemd cryptsetup module
+Requires:         %{name} = %{version}-%{release}
+License:          LGPLv2+
+
+%description cryptsetup
+systemd-cryptsetup is used to set up (with attach) and tear down (with detach) access to an encrypted block device.
+
 %package_help
 
 %prep
@@ -1564,7 +1572,6 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %{_systemddir}/systemd
 %dir %{_systemddir}/user-preset
 %{_systemddir}/systemd-coredump
-%{_systemddir}/systemd-veritysetup
 %{_systemddir}/systemd-network-generator
 %{_systemddir}/systemd-binfmt
 %{_systemddir}/user-preset/90-systemd.preset
@@ -1747,7 +1754,6 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %{_unitdir}/blockdev@.target
 %{_unitdir}/sys-kernel-tracing.mount
 %{_unitdir}/sysinit.target.wants/sys-kernel-tracing.mount
-%{_unitdir}/system-systemd\x2dcryptsetup.slice
 %{_unitdir}/systemd-journald-varlink@.socket
 %{_unitdir}/systemd-journald@.service
 %{_unitdir}/systemd-journald@.socket
@@ -1756,7 +1762,6 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %{_systemddir}/system-generators/systemd-sysv-generator
 %{_systemddir}/system-generators/systemd-rc-local-generator
 %{_systemddir}/system-generators/systemd-debug-generator
-%{_systemddir}/system-generators/systemd-veritysetup-generator
 %{_systemddir}/system-generators/systemd-run-generator
 %{_systemddir}/system-generators/systemd-system-update-generator
 %{_systemddir}/system-generators/systemd-getty-generator
@@ -1841,16 +1846,9 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %{_sysconfdir}/ld.so.conf.d/%{name}-%{_arch}.conf
 /usr/lib/rpm/macros.d/macros.systemd
 
-/usr/bin/systemd-cryptenroll
 /usr/lib/modprobe.d/README
 /usr/lib/sysctl.d/README
 /usr/lib/systemd/system/first-boot-complete.target
-/usr/lib/systemd/system/initrd-root-device.target.wants/remote-cryptsetup.target
-/usr/lib/systemd/system/initrd-root-device.target.wants/remote-veritysetup.target
-/usr/lib/systemd/system/remote-veritysetup.target
-/usr/lib/systemd/system/sysinit.target.wants/veritysetup.target
-/usr/lib/systemd/system/veritysetup-pre.target
-/usr/lib/systemd/system/veritysetup.target
 /usr/lib/systemd/user/app.slice
 /usr/lib/systemd/user/background.slice
 /usr/lib/systemd/user/session.slice
@@ -1924,7 +1922,6 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %{_systemddir}/systemd-hibernate-resume
 %{_systemddir}/systemd-random-seed
 %{_systemddir}/systemd-sleep
-%{_systemddir}/systemd-cryptsetup
 %{_systemddir}/systemd-udevd
 %{_systemddir}/systemd-vconsole-setup
 %{_unitdir}/systemd-udevd.service
@@ -1943,7 +1940,6 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %{_unitdir}/suspend.target
 %{_unitdir}/systemd-hybrid-sleep.service
 %{_unitdir}/systemd-suspend-then-hibernate.service
-%{_unitdir}/cryptsetup-pre.target
 %{_unitdir}/hybrid-sleep.target
 %{_unitdir}/systemd-hwdb-update.service
 %{_unitdir}/systemd-hibernate-resume@.service
@@ -1951,8 +1947,6 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %{_unitdir}/sleep.target
 %{_unitdir}/kmod-static-nodes.service
 %{_unitdir}/systemd-udevd-kernel.socket
-%{_unitdir}/remote-cryptsetup.target
-%{_unitdir}/cryptsetup.target
 %{_unitdir}/systemd-udev-trigger.service
 %{_unitdir}/sysinit.target.wants/systemd-udevd.service
 %{_unitdir}/sysinit.target.wants/systemd-modules-load.service
@@ -1960,12 +1954,10 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %{_unitdir}/sysinit.target.wants/systemd-random-seed.service
 %{_unitdir}/sysinit.target.wants/systemd-hwdb-update.service
 %{_unitdir}/sysinit.target.wants/kmod-static-nodes.service
-%{_unitdir}/sysinit.target.wants/cryptsetup.target
 %{_unitdir}/sysinit.target.wants/systemd-udev-trigger.service
 %{_unitdir}/systemd-udev-trigger.service.d/systemd-udev-trigger-no-reload.conf
 %{_unitdir}/sockets.target.wants/systemd-udevd-control.socket
 %{_unitdir}/sockets.target.wants/systemd-udevd-kernel.socket
-%{_systemddir}/system-generators/systemd-cryptsetup-generator
 %{_systemddir}/system-generators/systemd-hibernate-resume-generator
 %{_systemddir}/system-generators/systemd-gpt-auto-generator
 %{_systemddir}/network/99-default.link
@@ -2144,7 +2136,28 @@ grep -q -E '^KEYMAP="?fi-latin[19]"?' /etc/vconsole.conf 2>/dev/null &&
 %files pam
 %{_libdir}/security/pam_systemd.so
 
+%files cryptsetup
+%{_systemddir}/systemd-cryptsetup
+%{_systemddir}/systemd-veritysetup
+%{_systemddir}/system-generators/systemd-cryptsetup-generator
+%{_systemddir}/system-generators/systemd-veritysetup-generator
+%{_unitdir}/cryptsetup.target
+%{_unitdir}/cryptsetup-pre.target
+%{_unitdir}/remote-cryptsetup.target
+%{_unitdir}/sysinit.target.wants/cryptsetup.target
+%{_unitdir}/system-systemd\x2dcryptsetup.slice
+%{_unitdir}/initrd-root-device.target.wants/remote-cryptsetup.target
+%{_unitdir}/initrd-root-device.target.wants/remote-veritysetup.target
+%{_unitdir}/remote-veritysetup.target
+%{_unitdir}/sysinit.target.wants/veritysetup.target
+%{_unitdir}/veritysetup.target
+%{_unitdir}/veritysetup-pre.target
+/usr/bin/systemd-cryptenroll
+
 %changelog
+* Tue Jun 11 2024 wangyuhang <wangyuhang27@huawei.com> - 249-77
+- extract systemd-cryptsetup
+
 * Thu May 30 2024 wangyuhang <wangyuhang27@huawei.com> - 249-76
 - add backport-units-modprobe-.service-don-t-unescape-instance-name.patch