Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-10 Thread Sergio Arroutbi
Hello Lennart. Thank you so much for clarifying. This is right now pretty much more clear to me. On Fri, Jun 7, 2024 at 9:32 AM Lennart Poettering wrote: > On Do, 06.06.24 19:42, Sergio Arroutbi (sarro...@redhat.com) wrote: > > > > > I miss an option where systemd-cryptsetup is executed headless

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-07 Thread Andrei Borzenkov
On Fri, Jun 7, 2024 at 2:07 AM Sergio Arroutbi wrote: ... > > We are developing a PKCS11 plugin for Clevis > (https://github.com/latchset/clevis). Clevis allows automatic boot encrypted > disks unlocking by storing some information into LUKS metadata. > To do so, it is executed in parallel to sy

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-07 Thread Lennart Poettering
On Do, 06.06.24 19:42, Sergio Arroutbi (sarro...@redhat.com) wrote: > > > I miss an option where systemd-cryptsetup is executed headless, but > > > continues running, without exiting. > > > > > > I have tried with keyfile=/dev/urandom and option=keyfile-size=60, > > but > > > it is too quick.

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-06 Thread Sergio Arroutbi
Hello Lennart. Thanks for your response. I did not express myself correctly. On Thu, Jun 6, 2024 at 7:05 PM Lennart Poettering wrote: > On Mi, 05.06.24 15:36, Sergio Arroutbi (sarro...@redhat.com) wrote: > > > Hello. I have tried with headless=yes. The issue with this is that > > systemd-cryptse

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-06 Thread Lennart Poettering
On Mi, 05.06.24 15:36, Sergio Arroutbi (sarro...@redhat.com) wrote: > Hello. I have tried with headless=yes. The issue with this is that > systemd-cryptsetup ends, so I can not provide the password for decryption > through socket provided in /run/systemd/ask-password/sck.numbers > > I miss an opti

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-05 Thread Sergio Arroutbi
Hello. I have tried with headless=yes. The issue with this is that systemd-cryptsetup ends, so I can not provide the password for decryption through socket provided in /run/systemd/ask-password/sck.numbers I miss an option where systemd-cryptsetup is executed headless, but continues running, witho

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-04 Thread Luca Boccassi
Add headless=yes to the crypttab entry for the device you want to avoid interactive passwords prompt for On Tue, 4 Jun 2024 at 17:22, Sergio Arroutbi wrote: > > Hello Lennart. Thanks for your quick response. > > This option will disable all password prompt ... hiding also our calls to > systemd-

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-04 Thread Sergio Arroutbi
Hello Lennart. Thanks for your quick response. This option will disable all password prompt ... hiding also our calls to systemd-ask-password ... is it possible to discard systemd-cryptsetup one specifically? On Tue, Jun 4, 2024 at 2:52 PM Lennart Poettering wrote: > On Di, 04.06.24 13:08, Serg

Re: [systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-04 Thread Lennart Poettering
On Di, 04.06.24 13:08, Sergio Arroutbi (sarro...@redhat.com) wrote: > Hello. > > We are implementing a feature related to PKCS#11 that, when some conditions > are met (mostly that PKCS11 PIN has not been stored in configuration and > input to our systemd unit), requires systemd-cryptsetup service

[systemd-devel] Hiding systemd-cryptsetup password prompt

2024-06-04 Thread Sergio Arroutbi
Hello. We are implementing a feature related to PKCS#11 that, when some conditions are met (mostly that PKCS11 PIN has not been stored in configuration and input to our systemd unit), requires systemd-cryptsetup service password prompt to be hidden from TTY and executed only listening to password