Skip cryptsetup password quality checking
LUKS password quality checking is not useful since we only use long hex strings for passwords. Not skipping this means that we have to install cracklib-dicts for cryptsetup to work, which is unnecessary weight. Closes-Bug: #1861120 Change-Id: I1105c16caaf916e9101b6dca34a7f13936ce2240
This commit is contained in:
parent
81590cbf8a
commit
7c3621311a
|
@ -1679,6 +1679,7 @@ class VolumeTestCase(base.BaseVolumeTestCase):
|
||||||
mock_execute.assert_called_once_with(
|
mock_execute.assert_called_once_with(
|
||||||
'cryptsetup', 'luksChangeKey',
|
'cryptsetup', 'luksChangeKey',
|
||||||
'/some/device/thing',
|
'/some/device/thing',
|
||||||
|
'--force-password',
|
||||||
log_errors=processutils.LOG_ALL_ERRORS,
|
log_errors=processutils.LOG_ALL_ERRORS,
|
||||||
process_input='qwert\nasdfg\n',
|
process_input='qwert\nasdfg\n',
|
||||||
run_as_root=True)
|
run_as_root=True)
|
||||||
|
|
|
@ -559,6 +559,7 @@ class CreateVolumeFromSpecTask(flow_utils.CinderTask):
|
||||||
'cryptsetup',
|
'cryptsetup',
|
||||||
'luksChangeKey',
|
'luksChangeKey',
|
||||||
attach_info['device']['path'],
|
attach_info['device']['path'],
|
||||||
|
'--force-password',
|
||||||
run_as_root=True,
|
run_as_root=True,
|
||||||
process_input=key_str,
|
process_input=key_str,
|
||||||
log_errors=processutils.LOG_ALL_ERRORS)
|
log_errors=processutils.LOG_ALL_ERRORS)
|
||||||
|
@ -583,6 +584,7 @@ class CreateVolumeFromSpecTask(flow_utils.CinderTask):
|
||||||
'cryptsetup',
|
'cryptsetup',
|
||||||
'--batch-mode',
|
'--batch-mode',
|
||||||
'luksFormat',
|
'luksFormat',
|
||||||
|
'--force-password',
|
||||||
'--type', encryption['provider'],
|
'--type', encryption['provider'],
|
||||||
'--cipher', encryption['cipher'],
|
'--cipher', encryption['cipher'],
|
||||||
'--key-size', str(encryption['key_size']),
|
'--key-size', str(encryption['key_size']),
|
||||||
|
|
Loading…
Reference in New Issue