4 Commits

Author	SHA1	Message	Date
Ondrej Kozina	0ca1e680db	opal: add exclusive lock to avoid race. ... Activating LUKS2 device with OPAL support is multistep process. 1) read LR state 2) unlock LR 3) activate dm device 4) in case step 3) failed lock the device if in step 1) the device was locked. Otherwise, in case parallel activation happened on one device the process that failed to map dm device (device already active) could relock the LR afterwards and effectively break already active device. To avoid that we do steps 1) through 4) protected by exclusive opal lock unique per data block device configured for use with LUKS2 OPAL support.	2023-12-13 20:59:14 +00:00
Ondrej Kozina	2e978c8776	opal: do not always re-lock range on failed activation. ... If activation fails due to already active dm mapping we must not automatically re-lock the OPAL range since it would break the original active device.	2023-12-13 20:59:14 +00:00
Ondrej Kozina	997ef242a2	opal: no need to export internal opal_enabled function.	2023-12-13 15:16:02 +01:00
Luca Boccassi	b9cc0129c9	libcryptsetup: add OPAL type and params ... Signed-off-by: Luca Boccassi <bluca@debian.org> Co-authored-by: Ondrej Kozina <okozina@redhat.com>	2023-07-17 13:14:52 +02:00