eessppeelllloo/cryptsetup
1
0
Fork 0
mirror of https://gitlab.com/cryptsetup/cryptsetup.git synced 2025-12-19 06:40:08 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,629 Commits 13 Branches 80 Tags
vm-test
Commit Graph

4629 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ondrej Kozina
87bf39f71e Fix invalid assert for hw-opal data segment keys. 
hw-opal segment does not receive volume key for data
encryption, unlike crypt segment or hw-opal-crypt segment.
It gets key encryption key that is passed to device fw which
later unlocks the locking range key sealed in the device.

The assert may be skipped while volume key is not set.

Fixes: #875.
 2024-04-03 11:48:56 +00:00
Ondrej Kozina
1ae70b8c16 Fix data segment length compensation on misaligned partitions. 
While properly calculated data segment needed compensation due to
misaligned partition (locking range had to be truncated),
we passed wrong value (original partition size) to LUKS2 metadata.

It has to use calculated locking range length in bytes.

Fixes: #873.
 2024-04-02 14:21:01 +02:00
Daniel Zatovic
3d82771418 CI: make OPAL jobs uninterruptible 2024-03-26 16:09:22 +01:00
Ondrej Kozina
3e29dbe6f2 Add --hw-opal-factory-reset switch in erase options explicitly. 2024-03-26 12:01:27 +00:00
Ondrej Kozina
a462dbeb4e Check HW OPAL range parameters in proper units. 
The opal_range_check_attributes_fd function expected both
offset and length parameters of a LR to be passed in sectors (512B).
During format we passed it wrongly in OPAL blocks which caused
bogus check provided OPAL block size was not 512B.

Fixes: #871.
 2024-03-26 11:55:31 +01:00
Daniel Zatovic
8655093cb7 tests: run systemd tests using meson only when requested 2024-03-21 16:42:06 +01:00
Milan Broz
25b543d371 Update Readme for 2.7.1. 2024-03-07 15:53:23 +01:00
Milan Broz
6b3f9cd4bc tests: Fix Makefile * Meson to include all fs images. 2024-03-07 15:32:17 +01:00
Milan Broz
608e42c574 Update LUKS2 spec. 2024-03-07 15:26:54 +01:00
Milan Broz
143a76a5fa Add 2.7.1 release notes. 2024-03-07 15:23:15 +01:00
Milan Broz
9906bc40e1 test: Fix tests on RHEL7 clones (no keyring in dm-crypt). 2024-03-07 13:18:05 +00:00
Milan Broz
dc669a14d3 Add xfs V5 image to tests. 
XFS V4 can be disabled in kernel, add image V5.

Minimal 300M xfs size avoided by using QA variables magic in format:
export TEST_DIR=1 TEST_DEV=1 QA_CHECK_FS=1 ; mkfs -t xfs ...
 2024-03-07 11:30:21 +00:00
Ondrej Kozina
8819194281 tests: fix compat-test-opal bug for empty LUKS2 passphrase. 
The bug was hidden due to previously contradicting condition.
 2024-03-06 14:23:02 +01:00
Ondrej Kozina
5d6fbf7b53 tests: move luks1 decryption resume test. 
It cannot be run in fips mode due to empty passphrase
is no longer allowed.
 2024-03-06 13:10:34 +01:00
Ondrej Kozina
4347a01cce tests: fix fips mode detection contradiction in various tests. 2024-03-06 13:08:50 +01:00
Yuri Chornoivan
6525b40a7b po: update uk.po (from translationproject.org) 2024-03-06 09:51:20 +01:00
Remus-Gabriel Chelu
31573693a0 po: update ro.po (from translationproject.org) 2024-03-06 09:51:20 +01:00
Jakub Bogusz
accc9c0ee9 po: update pl.po (from translationproject.org) 2024-03-06 09:51:20 +01:00
Hiroshi Takekawa
5ec40f98ac po: update ja.po (from translationproject.org) 2024-03-06 09:51:20 +01:00
Frédéric Marchal
5eb9c8b27a po: update fr.po (from translationproject.org) 2024-03-06 09:51:20 +01:00
Roland Illig
eccd46206d po: update de.po (from translationproject.org) 2024-03-06 09:51:20 +01:00
Petr Pisar
8d6fc937da po: update cs.po (from translationproject.org) 2024-03-06 09:51:20 +01:00
Milan Broz
41755b71b6 Set devel version. 2024-03-06 09:51:10 +01:00
Ondrej Kozina
201a4b7d8b Add regression test for resuming LUKS1 decryption. 2024-03-05 14:58:02 +01:00
Ondrej Kozina
33b9a51fa8 Fix regression in LUKS1 decryption. 
With removal of cryptsetup-reencrypt there was
a bug introduced that broke resuming interrupted
LUKS1 decryption operation. LUKS2 code was not
affected.
 2024-03-05 14:58:02 +01:00
Milan Broz
9d38ea70e2 Require --debug log in bug report issue template. 2024-02-29 17:07:41 +00:00
Milan Broz
2cd0be9501 Allow all stable branches in GitHub actions. 2024-02-29 17:07:41 +00:00
Ondrej Kozina
5a0208cd06 Allow --link-vk-to-keyring with --test-passphrase option. 
To make it possible to upload volume key in user specified kernel
keyring without need to (re)activate the device.
 2024-02-29 16:25:17 +01:00
Ondrej Kozina
db635c428b Fix abort triggered by initializing decryption via --active-name. 
The invalid test unfortunately hid an error in processing
of --active-name command line option.
 2024-02-28 17:11:46 +01:00
Milan Broz
678b28989b Fix indentation in integritysetup man page and crypt description. 2024-02-22 20:58:35 +00:00
Milan Broz
82f37d7a10 Sort options in man pages alphabetically. 2024-02-22 20:58:35 +00:00
Milan Broz
cbf818a660 Fix JSON exampe in progress-frequency option. 2024-02-22 20:58:35 +00:00
Milan Broz
3ff8d55a8b Fix veritysetup man page typo. 2024-02-22 20:58:35 +00:00
Sergei Ilinykh
349572e69e Fix compilation with libargon2 argon when internal disabled 
This fixes a regression introduced somewhere on the way to 2.7.0.
A specific set of options led to complete lack of Argon2
regardless of --enable-libargon2 option.
 2024-02-22 20:43:35 +03:00
Daniel Zatovic
0725efefa7 CI: fix improper distro specification for 32-bit Debian. 
The `variables` section is repeated for 32-bit Debian job. Therefore the
`DISTRO` environment variable is ignored and 64-bit distro name is
inherited from the `.debian-prep` job.
 2024-02-22 16:50:46 +01:00
Daniel Zatovic
af35c93332 CI: don't store kernel log, only check for coredumps. 
The kernel log is uploaded automatically by the custom executor, no need
to upload it from inside the VM (and /mnt/artifacts is not mounted in
the new CI scripts).
 2024-02-22 11:41:37 +00:00
Daniel Zatovic
193f8ff595 CI: increase disk size for csmock job. 2024-02-22 11:41:37 +00:00
Daniel Zatovic
f91524dc63 CI: add OPAL jobs. 2024-02-22 11:41:37 +00:00
Daniel Zatovic
f8e79cdbe6 CI: update jobs for new CI infrastrucure 2024-02-22 11:41:37 +00:00
Ondrej Kozina
35cd898c63 Fix crypto vectors test in meson. 
Otherwise it gets skipped in meson everytime.
 2024-02-21 15:56:14 +01:00
Tobias Rosenkranz
91c1d2202a Skip test if keyctl is missing 2024-02-18 14:46:37 +01:00
Milan Broz
a6d9dc0a16 Do not require argon2.h if implemented natively in crypto library. 2024-02-13 12:38:00 +01:00
Ondrej Kozina
f681194b57 Fix mistake in crypt_set_keyring_to_link documentation. 
The keyring_to_link_vk parameter must be prefixed by
either "%:" or "%keyring:" substrings provided caller
opted for text description of the target keyring.
 2024-02-13 11:40:13 +01:00
Ondrej Kozina
fdac0d7ee2 cryptsetup.spec: drop libargon2 in favour of openssl implementation. 2024-02-12 10:43:47 +00:00
Milan Broz
b417154e71 Fix configure Argon2 OpenSSL detection to not compile internal Argon2. 
Code is not called anyway, but should be completely disabled.
Note: there is intentionally no way to disable OpenSSL Argon2 if present.
 2024-02-09 12:51:34 +01:00
Milan Broz
4dde8f078f Version 2.7.0. v2.7.0 2024-01-24 10:47:32 +01:00
Milan Broz
f11af15cd0 Fix local variable name that hides global one. 
Found by CodeQL.
 2024-01-23 20:22:11 +01:00
Milan Broz
bd0ef58b3a Update copyright notice to include 2024 year. 2024-01-23 16:10:44 +01:00
Ondrej Kozina
cbc7253400 Unify error code for missing key description. 
Use -ESRCH for similar error code as with
crypt_activate_by_keyslot_context. Here it's not
confliciting with previous use for the very code but
let's make it easier and use same code for similar case.
 2024-01-23 12:08:43 +01:00
Ondrej Kozina
35ec935cc2 Update API documentation for crypt_set_keyring_to_link. 
The section about placeholder API no longer applies.
 2024-01-23 12:03:39 +01:00