shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2025-01-05 09:17:44 +03:00
Code

test: store the key on a separate device

Browse Source
This commit is contained in:
Frantisek Sumsal 2022-05-26 14:52:52 +02:00
parent b22d90e594
commit 6b70d3cf81
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
test/TEST-24-CRYPTSETUP/test.sh
View File

@ -12,10 +12,8 @@ TEST_FORCE_NEWIMAGE=1
PART_UUID="deadbeef-dead-dead-beef-000000000000" PART_UUID="deadbeef-dead-dead-beef-000000000000"
DM_NAME="test24_varcrypt" DM_NAME="test24_varcrypt"
# Mount the keyfile only in initrd (hence rd.luks.key), since it resides on KERNEL_APPEND+=" rd.luks=1 luks.name=$PART_UUID=$DM_NAME luks.key=$PART_UUID=/keyfile:LABEL=varcrypt_keydev"
# the rootfs and we would get a (harmless) error when trying to mount it after QEMU_OPTIONS+=" -drive format=raw,cache=unsafe,file=${STATEDIR:?}/keydev.img"
# switching root (since rootfs is already mounted)
KERNEL_APPEND+=" rd.luks=1 luks.name=$PART_UUID=$DM_NAME rd.luks.key=$PART_UUID=/etc/varkey:LABEL=systemd_boot"
check_result_qemu() { check_result_qemu() {
local ret=1 local ret=1
@ -57,7 +55,13 @@ test_create_image() {
install_dmevent install_dmevent
generate_module_dependencies generate_module_dependencies
echo -n test >"$initdir/etc/varkey" # Create a keydev
dd if=/dev/zero of="${STATEDIR:?}/keydev.img" bs=1M count=16
mkfs.ext4 -L varcrypt_keydev "$STATEDIR/keydev.img"
mkdir -p "$STATEDIR/keydev"
mount "$STATEDIR/keydev.img" "$STATEDIR/keydev"
echo -n test >"$STATEDIR/keydev/keyfile"
umount "$STATEDIR/keydev"
cat >>"$initdir/etc/fstab" <<EOF cat >>"$initdir/etc/fstab" <<EOF
/dev/mapper/$DM_NAME /var ext4 defaults 0 1 /dev/mapper/$DM_NAME /var ext4 defaults 0 1