mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-12 03:10:08 +01:00
c0cef43a4e
If configured with --disable-cryptsetup (e.g. if only veritysetup is required), these tests won't be able to run cryptsetup, so they need to be skipped.
316 lines
9.3 KiB
Bash
Executable File
316 lines
9.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
[ -z "$CRYPTSETUP_PATH" ] && CRYPTSETUP_PATH=".."
|
|
CRYPTSETUP=$CRYPTSETUP_PATH/cryptsetup
|
|
DEV=""
|
|
DEV_STACKED="luks0xbabe"
|
|
DEV_NAME="dummyalign"
|
|
MNT_DIR="./mnt_luks"
|
|
PWD1="93R4P4pIqAH8"
|
|
PWD2="mymJeD8ivEhE"
|
|
FAST_PBKDF="--pbkdf-force-iterations 1000"
|
|
|
|
cleanup() {
|
|
udevadm settle >/dev/null 2>&1
|
|
if [ -d "$MNT_DIR" ] ; then
|
|
umount -f $MNT_DIR 2>/dev/null
|
|
rmdir $MNT_DIR 2>/dev/null
|
|
fi
|
|
[ -b /dev/mapper/$DEV_STACKED ] && dmsetup remove --retry $DEV_STACKED >/dev/null 2>&1
|
|
[ -b /dev/mapper/$DEV_NAME ] && dmsetup remove --retry $DEV_NAME >/dev/null 2>&1
|
|
# FIXME scsi_debug sometimes in-use here
|
|
sleep 1
|
|
rmmod scsi_debug >/dev/null 2>&1
|
|
sleep 1
|
|
}
|
|
|
|
fail()
|
|
{
|
|
if [ -n "$1" ] ; then echo "FAIL $1" ; fi
|
|
echo "FAILED backtrace:"
|
|
while caller $frame; do ((frame++)); done
|
|
cleanup
|
|
exit 100
|
|
}
|
|
|
|
skip()
|
|
{
|
|
echo "TEST SKIPPED: $1"
|
|
cleanup
|
|
exit 77
|
|
}
|
|
|
|
function dm_crypt_features()
|
|
{
|
|
VER_STR=$(dmsetup targets | grep crypt | cut -f2 -dv)
|
|
[ -z "$VER_STR" ] && fail "Failed to parse dm-crypt version."
|
|
|
|
VER_MAJ=$(echo $VER_STR | cut -f 1 -d.)
|
|
VER_MIN=$(echo $VER_STR | cut -f 2 -d.)
|
|
VER_PTC=$(echo $VER_STR | cut -f 3 -d.)
|
|
|
|
[ $VER_MAJ -lt 1 ] && return
|
|
[ $VER_MAJ -gt 1 ] && {
|
|
DM_PERF_CPU=1
|
|
DM_SECTOR_SIZE=1
|
|
return
|
|
}
|
|
|
|
[ $VER_MIN -lt 14 ] && return
|
|
DM_PERF_CPU=1
|
|
if [ $VER_MIN -ge 17 -o \( $VER_MIN -eq 14 -a $VER_PTC -ge 5 \) ]; then
|
|
DM_SECTOR_SIZE=1
|
|
fi
|
|
}
|
|
|
|
add_device() {
|
|
modprobe scsi_debug $@ delay=0 >/dev/null 2>&1
|
|
if [ $? -ne 0 ] ; then
|
|
echo "This kernel seems to not support proper scsi_debug module, test skipped."
|
|
exit 77
|
|
fi
|
|
|
|
sleep 2
|
|
DEV=$(grep -l -e scsi_debug /sys/block/*/device/model | cut -f4 -d /)
|
|
|
|
if [ ! -e /sys/block/$DEV/alignment_offset ] ; then
|
|
echo "This kernel seems to not support topology info, test skipped."
|
|
cleanup
|
|
exit 77
|
|
fi
|
|
|
|
DEV="/dev/$DEV"
|
|
[ -b $DEV ] || fail "Cannot find $DEV."
|
|
}
|
|
|
|
format() # key_bits expected [forced]
|
|
{
|
|
if [ -z "$3" ] ; then
|
|
echo -n "Formatting using topology info ($1 bits key)..."
|
|
echo $PWD1 | $CRYPTSETUP luksFormat --type luks1 $DEV -q $FAST_PBKDF -c aes-cbc-essiv:sha256 -s $1 || fail
|
|
else
|
|
echo -n "Formatting using forced sector alignment $3 ($1 bits key)..."
|
|
echo $PWD1 | $CRYPTSETUP luksFormat --type luks1 $DEV -q $FAST_PBKDF -s $1 -c aes-cbc-essiv:sha256 --align-payload=$3 ||fail
|
|
fi
|
|
|
|
# check the device can be activated
|
|
echo $PWD1 | $CRYPTSETUP luksOpen $DEV $DEV_NAME || fail
|
|
$CRYPTSETUP close $DEV_NAME || fail
|
|
|
|
ALIGN=$($CRYPTSETUP luksDump $DEV |grep "Payload offset" | sed -e s/.*\\t//)
|
|
#echo "ALIGN = $ALIGN"
|
|
|
|
[ -z "$ALIGN" ] && fail
|
|
[ $ALIGN -ne $2 ] && fail "Expected alignment differs: expected $2 != detected $ALIGN"
|
|
|
|
# test some operation, just in case
|
|
echo -e "$PWD1\n$PWD2" | $CRYPTSETUP luksAddKey $DEV $FAST_PBKDF --key-slot 1
|
|
[ $? -ne 0 ] && fail "Keyslot add failed."
|
|
|
|
$CRYPTSETUP -q luksKillSlot $DEV 1
|
|
[ $? -ne 0 ] && fail "Keyslot removal failed."
|
|
|
|
echo "PASSED"
|
|
}
|
|
|
|
get_offsets()
|
|
{
|
|
$CRYPTSETUP luksDump $DEV | grep "$1" | cut -s -d ':' -f 2 | sed -e 's/\s//g' -e :a -e N -e 's/\n/:/g' -e 's/\s//g' -e ta
|
|
}
|
|
|
|
format_null()
|
|
{
|
|
if [ $3 -eq 0 ] ; then
|
|
echo -n "Formatting using topology info ($1 bits key) [slot 0"
|
|
echo | $CRYPTSETUP luksFormat --type luks1 $DEV -q $FAST_PBKDF -c null -s $1 || fail
|
|
else
|
|
echo -n "Formatting using forced sector alignment $3 ($1 bits key) [slot 0"
|
|
echo | $CRYPTSETUP luksFormat --type luks1 $DEV -q $FAST_PBKDF -c null -s $1 --align-payload=$3 || fail
|
|
fi
|
|
|
|
# check the device can be activated
|
|
echo | $CRYPTSETUP luksOpen $DEV $DEV_NAME || fail
|
|
$CRYPTSETUP close $DEV_NAME || fail
|
|
|
|
POFF=$(get_offsets "Payload offset")
|
|
[ -z "$POFF" ] && fail
|
|
[ $POFF != $2 ] && fail "Expected data offset differs: expected $2 != detected $POFF"
|
|
if [ -n "$4" ] ; then
|
|
for j in 1 2 3 4 5 6 7 ; do
|
|
echo -e "\n" | $CRYPTSETUP luksAddKey $DEV -q $FAST_PBKDF --key-slot $j -c null $PARAMS
|
|
echo -n $j
|
|
[ $? -ne 0 ] && fail
|
|
done
|
|
|
|
KOFF=$(get_offsets "Key material offset")
|
|
[ -z "$KOFF" ] && fail
|
|
[ $KOFF != $4 ] && fail "Expected keyslots offsets differ: expected $4 != detected $KOFF"
|
|
fi
|
|
|
|
echo "]...PASSED"
|
|
}
|
|
|
|
format_plain() # sector size
|
|
{
|
|
echo -n "Formatting plain device (sector size $1)..."
|
|
if [ -n "$DM_SECTOR_SIZE" ] ; then
|
|
echo $PWD1 | $CRYPTSETUP open --type plain --hash sha256 --sector-size $1 $DEV $DEV_NAME || fail
|
|
$CRYPTSETUP close $DEV_NAME || fail
|
|
echo "PASSED"
|
|
else
|
|
echo "N/A"
|
|
fi
|
|
}
|
|
|
|
format_plain_fail() # sector size
|
|
{
|
|
echo -n "Formatting plain device (sector size $1, must fail)..."
|
|
if [ -n "$DM_SECTOR_SIZE" ] ; then
|
|
echo $PWD1 | $CRYPTSETUP open --type plain --hash sha256 --sector-size $1 $DEV $DEV_NAME >/dev/null 2>&1 && fail
|
|
echo "PASSED"
|
|
else
|
|
echo "N/A"
|
|
fi
|
|
}
|
|
|
|
[ ! -x "$CRYPTSETUP" ] && skip "Cannot find $CRYPTSETUP, test skipped."
|
|
if [ $(id -u) != 0 ]; then
|
|
echo "WARNING: You must be root to run this test, test skipped."
|
|
exit 77
|
|
fi
|
|
|
|
dm_crypt_features
|
|
modprobe --dry-run scsi_debug >/dev/null 2>&1 || skip "This kernel seems to not support proper scsi_debug module, test skipped."
|
|
cleanup
|
|
if [ -d /sys/module/scsi_debug ] ; then
|
|
echo "Cannot use scsi_debug module (in use or compiled-in), test skipped."
|
|
exit 77
|
|
fi
|
|
|
|
echo "# Create desktop-class 4K drive"
|
|
echo "# (logical_block_size=512, physical_block_size=4096, alignment_offset=0)"
|
|
add_device dev_size_mb=16 sector_size=512 physblk_exp=3 num_tgts=1
|
|
format 256 4096
|
|
format 256 2056 8
|
|
format 128 2048
|
|
format 128 1032 8
|
|
format 256 8192 8192
|
|
format 128 8192 8192
|
|
cleanup
|
|
|
|
echo "# Create desktop-class 4K drive with misaligned opt-io (some bad USB enclosures)"
|
|
echo "# (logical_block_size=512, physical_block_size=4096, alignment_offset=0, opt-io=1025)"
|
|
add_device dev_size_mb=16 sector_size=512 physblk_exp=3 num_tgts=1 opt_blks=1025
|
|
format 256 4096
|
|
format 256 2056 8
|
|
format 128 2048
|
|
format 128 1032 8
|
|
format 256 8192 8192
|
|
format 128 8192 8192
|
|
cleanup
|
|
|
|
echo "# Create desktop-class 4K drive w/ 63-sector DOS partition compensation"
|
|
echo "# (logical_block_size=512, physical_block_size=4096, alignment_offset=3584)"
|
|
add_device dev_size_mb=16 sector_size=512 physblk_exp=3 lowest_aligned=7 num_tgts=1
|
|
format 256 4103
|
|
format 256 2056 8
|
|
format 128 2055
|
|
format 128 1032 8
|
|
cleanup
|
|
|
|
echo "# Create enterprise-class 4K drive"
|
|
echo "# (logical_block_size=4096, physical_block_size=4096, alignment_offset=0)"
|
|
add_device dev_size_mb=16 sector_size=4096 num_tgts=1 opt_blks=64
|
|
format 256 4096
|
|
format 256 2056 8
|
|
format 128 2048
|
|
format 128 1032 8
|
|
cleanup
|
|
|
|
echo "# Create classic 512B drive and stack dm-linear"
|
|
echo "# (logical_block_size=512, physical_block_size=512, alignment_offset=0)"
|
|
add_device dev_size_mb=16 sector_size=512 num_tgts=1
|
|
DEV2=$DEV
|
|
DEV=/dev/mapper/$DEV_STACKED
|
|
dmsetup create $DEV_STACKED --table "0 32768 linear $DEV2 0"
|
|
format 256 4096
|
|
format 256 2056 8
|
|
format 128 2048
|
|
format 128 1032 8
|
|
format 128 8192 8192
|
|
cleanup
|
|
|
|
echo "# Create classic 512B drive and stack dm-linear (plain mode)"
|
|
add_device dev_size_mb=16 sector_size=512 num_tgts=1
|
|
DEV2=$DEV
|
|
DEV=/dev/mapper/$DEV_STACKED
|
|
dmsetup create $DEV_STACKED --table "0 32768 linear $DEV2 0"
|
|
format_plain 512
|
|
format_plain 1024
|
|
format_plain 2048
|
|
format_plain 4096
|
|
format_plain_fail 1111
|
|
format_plain_fail 8192
|
|
echo "# Create classic 512B drive, unaligned to 4096 and stack dm-linear (plain mode)"
|
|
dmsetup remove --retry $DEV_STACKED >/dev/null 2>&1
|
|
dmsetup create $DEV_STACKED --table "0 32762 linear $DEV2 0"
|
|
format_plain 512
|
|
format_plain 1024
|
|
format_plain_fail 2048
|
|
format_plain_fail 4096
|
|
cleanup
|
|
|
|
echo "# Offset check: 512B sector drive"
|
|
add_device dev_size_mb=16 sector_size=512 num_tgts=1
|
|
# |k| expO reqO expected slot offsets
|
|
format_null 128 2048 0 8:136:264:392:520:648:776:904
|
|
format_null 128 1032 1
|
|
format_null 128 1032 8
|
|
format_null 128 1152 128
|
|
format_null 128 2048 2048
|
|
format_null 256 4096 0 8:264:520:776:1032:1288:1544:1800
|
|
format_null 256 2056 1
|
|
format_null 256 2056 8
|
|
format_null 256 2176 128
|
|
format_null 256 4096 2048
|
|
format_null 512 4096 0 8:512:1016:1520:2024:2528:3032:3536
|
|
format_null 512 4040 1
|
|
format_null 512 4040 8
|
|
format_null 512 4096 128
|
|
format_null 512 4096 2048
|
|
cleanup
|
|
|
|
echo "# Offset check: 4096B sector drive"
|
|
add_device dev_size_mb=16 sector_size=4096 num_tgts=1 opt_blks=64
|
|
format_null 128 2048 0 8:136:264:392:520:648:776:904
|
|
format_null 128 1032 1
|
|
format_null 128 1032 8
|
|
format_null 128 1152 128
|
|
format_null 128 2048 2048
|
|
format_null 256 4096 0 8:264:520:776:1032:1288:1544:1800
|
|
format_null 256 2056 1
|
|
format_null 256 2056 8
|
|
format_null 256 2176 128
|
|
format_null 256 4096 2048
|
|
format_null 512 4096 0 8:512:1016:1520:2024:2528:3032:3536
|
|
format_null 512 4040 1
|
|
format_null 512 4040 8
|
|
format_null 512 4096 128
|
|
format_null 512 4096 2048
|
|
cleanup
|
|
|
|
echo "# Create enterprise-class 4K drive with fs and LUKS images."
|
|
# loop device here presents 512 block but images have 4k block
|
|
# cryptsetup should properly use 4k block on direct-io
|
|
add_device dev_size_mb=32 sector_size=4096 physblk_exp=0 num_tgts=1 opt_blks=64
|
|
for file in $(ls img_fs_*.img.xz) ; do
|
|
echo "Format using fs image $file."
|
|
xz -d -c $file | dd of=$DEV bs=1M 2>/dev/null || fail "bad image"
|
|
[ ! -d $MNT_DIR ] && mkdir $MNT_DIR
|
|
mount $DEV $MNT_DIR || skip "Mounting image is not available."
|
|
echo $PWD1 | $CRYPTSETUP luksFormat --type luks1 --key-size 256 $FAST_PBKDF $MNT_DIR/luks.img || fail
|
|
echo $PWD2 | $CRYPTSETUP luksFormat --type luks1 --key-size 256 $FAST_PBKDF $MNT_DIR/luks.img --header $MNT_DIR/luks_header.img || fail
|
|
umount $MNT_DIR
|
|
done
|
|
cleanup
|