mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-12 19:30:04 +01:00
3d6bb53b31
This patch adds a udev rule, so that you can specify rd.luks.reencrypt=<UUID> instead of rd.luks.reencrypt=<devname> It also moves the job to the "settled" queue, which means, that it is executed after udev has settled.
34 lines
1.2 KiB
Bash
Executable File
34 lines
1.2 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
REENC=$(getargs rd.luks.reencrypt=)
|
|
REENC_DEV=$(echo $REENC | sed 's/:.*//')
|
|
REENC_SIZE=$(echo $REENC | sed -n 's/.*://p')
|
|
|
|
REENC_KEY=$(getargs rd.luks.reencrypt_key=)
|
|
if [ -z "$REENC_KEY" ] ; then
|
|
REENC_KEY=none
|
|
fi
|
|
|
|
REENC_SLOT=$(getargs rd.luks.reencrypt_keyslot=)
|
|
if [ -z "$REENC_SLOT" ] ; then
|
|
REENC_SLOT=any
|
|
fi
|
|
|
|
if [ -n "$REENC_DEV" ] ; then
|
|
{
|
|
printf 'SUBSYSTEM!="block", GOTO="reenc_end"\n'
|
|
printf 'ACTION!="add|change", GOTO="reenc_end"\n'
|
|
printf 'KERNEL=="%s", ' $REENC_DEV
|
|
printf 'ENV{ID_FS_TYPE}=="crypto_LUKS", RUN+="/sbin/initqueue \
|
|
--unique --onetime --settled --name crypt-reencrypt-%%k \
|
|
/sbin/reencrypt $env{DEVNAME} %s"\n' "$REENC_KEY $REENC_SLOT $REENC_SIZE"
|
|
|
|
printf 'ENV{ID_FS_UUID}=="*%s*", ' $REENC_DEV
|
|
printf 'ENV{ID_FS_TYPE}=="crypto_LUKS", RUN+="/sbin/initqueue \
|
|
--unique --onetime --settled --name crypt-reencrypt-%%k \
|
|
/sbin/reencrypt $env{DEVNAME} %s"\n' "$REENC_KEY $REENC_SLOT $REENC_SIZE"
|
|
printf 'LABEL="reenc_end"\n'
|
|
} > /etc/udev/rules.d/69-reencryption.rules
|
|
initqueue --unique --finished --name crypt-reencrypt-finished-${REENC_DEV} [ -e /tmp/reencrypted ]
|
|
fi
|