cronekorkn/bundlewrap
1
0
Fork 0
Code Issues Pull requests 8 Projects Releases Wiki Activity

test dmcrypt

Browse source
This commit is contained in:
mwiegand 2021-10-13 23:54:41 +02:00
parent 1c330b626e
commit a2a588b171
1 changed files with 11 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
bundles/dm-crypt/items.py
View file

@ -1,6 +1,5 @@
for name, conf in node.metadata.get('dm-crypt').items(): for name, conf in node.metadata.get('dm-crypt').items():
actions[f'dm-crypt_format_{name}'] = { actions[f'dm-crypt_format_{name}'] = {
'cascade_skip': False,
'command': f"cryptsetup --batch-mode luksFormat --cipher aes-xts-plain64 --key-size 512 '{conf['device']}'", 'command': f"cryptsetup --batch-mode luksFormat --cipher aes-xts-plain64 --key-size 512 '{conf['device']}'",
'data_stdin': conf['password'], 'data_stdin': conf['password'],
'unless': f"blkid -t TYPE=crypto_LUKS '{conf['device']}'", 'unless': f"blkid -t TYPE=crypto_LUKS '{conf['device']}'",
@ -9,16 +8,23 @@ for name, conf in node.metadata.get('dm-crypt').items():
'pkg_apt:cryptsetup', 'pkg_apt:cryptsetup',
}, },
} }
actions[f'dm-crypt_test_{name}'] = {
'command': 'false',
'unless': f"! cryptsetup --batch-mode luksOpen --test-passphrase '{conf['device']}'",
'data_stdin': conf['password'],
'needs': {
f"action:dm-crypt_format_{name}",
},
}
actions[f'dm-crypt_open_{name}'] = { actions[f'dm-crypt_open_{name}'] = {
'cascade_skip': False,
'command': f"cryptsetup --batch-mode luksOpen '{conf['device']}' '{name}'", 'command': f"cryptsetup --batch-mode luksOpen '{conf['device']}' '{name}'",
'data_stdin': conf['password'], 'data_stdin': conf['password'],
'unless': f"test -e /dev/mapper/{name}", 'unless': f"test -e /dev/mapper/{name}",
'comment': f"Unlocks the device '{conf['device']}' and makes it available in: '/dev/mapper/{name}'", 'comment': f"Unlocks the device '{conf['device']}' and makes it available in: '/dev/mapper/{name}'",
'needs': { 'needs': {
f"action:dm-crypt_format_{name}", f"action:dm-crypt_test_{name}",
'pkg_apt:cryptsetup',
}, },
'needed_by': set(), 'needed_by': set(),
} }