Re: keyscript (was: Re: support for merged /usr in Debian)

2016-01-08 Thread Marc Haber
On Fri, 8 Jan 2016 18:51:20 +0100, Christian Seiler
 wrote:
>(Warning: not thoroughly tested, code is a quick hack and awful, might
>do unexpected things. Also not documented. Quick howto: run make, copy
>systemd-keyscript-cryptsetup to /lib/cryptsetup/, copy keyscript-generator
>to /lib/systemd/system-generators, do systemctl daemon-reload and hope
>for the best. systemd-cryptsetup will still warn about 'unknown option',
>but it should work.)
>
>(Interactive scripts obviously don't work, same thing as with
>interactive init scripts, but if you need a password you can just use
>PASS=$(systemd-ask-password "Some Message").)

You're amazingly constructive. I wish I had your output. Thanks!

Will this handle a keyscript that needs to unlock another crypto LV
which is unlocked with a a password?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834



keyscript (was: Re: support for merged /usr in Debian)

2016-01-08 Thread Christian Seiler
On 01/08/2016 09:50 AM, Marc Haber wrote:
> The loss of keyscript just broke my clients.

I had an inspiration earlier and hacked this together:
https://gist.github.com/chris-se/9c0def7dca60d023d188

(Warning: not thoroughly tested, code is a quick hack and awful, might
do unexpected things. Also not documented. Quick howto: run make, copy
systemd-keyscript-cryptsetup to /lib/cryptsetup/, copy keyscript-generator
to /lib/systemd/system-generators, do systemctl daemon-reload and hope
for the best. systemd-cryptsetup will still warn about 'unknown option',
but it should work.)

(Interactive scripts obviously don't work, same thing as with
interactive init scripts, but if you need a password you can just use
PASS=$(systemd-ask-password "Some Message").)

Regards,
Christian



signature.asc
Description: OpenPGP digital signature