Merge "Use LUKS1 for certfs-ramfs for all distributions" into stable/train
This commit is contained in:
commit
4eb2fdacec
|
@ -1,19 +1,16 @@
|
||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
|
||||||
modprobe brd
|
cryptsetup_args="--type=luks1"
|
||||||
|
|
||||||
|
# Only 1 block ram device is needed
|
||||||
|
modprobe brd rd_nr=1
|
||||||
|
|
||||||
passphrase=$(head /dev/urandom | tr -dc "a-zA-Z0-9" | fold -w 32 | head -n 1)
|
passphrase=$(head /dev/urandom | tr -dc "a-zA-Z0-9" | fold -w 32 | head -n 1)
|
||||||
certs_path=$(awk "/base_cert_dir / {printf \$3}" /etc/octavia/amphora-agent.conf)
|
certs_path=$(awk "/base_cert_dir / {printf \$3}" /etc/octavia/amphora-agent.conf)
|
||||||
mkdir -p "${certs_path}"
|
mkdir -p "${certs_path}"
|
||||||
|
|
||||||
echo -n "${passphrase}" | cryptsetup --pbkdf-memory=262144 luksFormat /dev/ram0 -
|
echo -n "${passphrase}" | cryptsetup $cryptsetup_args luksFormat /dev/ram0 -
|
||||||
# Some distrobutions have an old cryptsetup, try without --pbkdf-memory
|
echo -n "${passphrase}" | cryptsetup $cryptsetup_args luksOpen /dev/ram0 certfs-ramfs -
|
||||||
if [ $? -eq 0 ]
|
|
||||||
then
|
|
||||||
echo -n "${passphrase}" | cryptsetup --pbkdf-memory=262144 luksOpen /dev/ram0 certfs-ramfs -
|
|
||||||
else
|
|
||||||
echo -n "${passphrase}" | cryptsetup luksFormat /dev/ram0 -
|
|
||||||
echo -n "${passphrase}" | cryptsetup luksOpen /dev/ram0 certfs-ramfs -
|
|
||||||
fi
|
|
||||||
|
|
||||||
mkfs.ext2 /dev/mapper/certfs-ramfs
|
mkfs.ext2 /dev/mapper/certfs-ramfs
|
||||||
mount /dev/mapper/certfs-ramfs "${certs_path}"
|
mount /dev/mapper/certfs-ramfs "${certs_path}"
|
||||||
|
|
Loading…
Reference in New Issue