2020-06-28 09:28:57 +05:30
|
|
|
# vim: set ft=sh:
|
2020-07-03 21:19:09 +05:30
|
|
|
# shellcheck shell=sh
|
|
|
|
|
#
|
|
|
|
|
# false positive
|
|
|
|
|
# shellcheck disable=2154
|
|
|
|
|
#
|
|
|
|
|
# word splitting is safe by design
|
|
|
|
|
# shellcheck disable=2086,2068
|
2020-06-28 09:28:57 +05:30
|
|
|
{
|
|
|
|
|
[ "$break" = luks ] && { print "break before unlock_luks()"; sh; }
|
|
|
|
|
|
|
|
|
|
mkdir -p /run/cryptsetup
|
|
|
|
|
|
|
|
|
|
IFS=,; set -- $luks_opts; unset IFS
|
|
|
|
|
|
|
|
|
|
for opt; do case "$opt" in
|
|
|
|
|
discard=1) luks_discard="--allow-discards" ;;
|
|
|
|
|
header=*) luks_header="--${opt}" ;;
|
|
|
|
|
name=*) luks_name="${opt#*=}" ;;
|
|
|
|
|
root=*) luks_root="${opt#*=}" ;;
|
|
|
|
|
key=*) luks_key="-d ${opt#*=}" ;;
|
|
|
|
|
esac; done
|
|
|
|
|
|
|
|
|
|
resolve_device "$luks_root"
|
|
|
|
|
|
|
|
|
|
set -- \
|
|
|
|
|
"$luks_key" "$luks_header" "$luks_discard" \
|
|
|
|
|
"$device" "${luks_name:-crypt-${device##*/}}"
|
|
|
|
|
|
|
|
|
|
# libdevice-mapper assumes that udev has dm rules
|
|
|
|
|
# which is not true because we use our device-helper for dm stuff
|
|
|
|
|
# this variable fixes possible(?) hang
|
|
|
|
|
export DM_DISABLE_UDEV=1
|
|
|
|
|
|
|
|
|
|
cryptsetup open $@ || panic "failed to unlock LUKS"
|
|
|
|
|
}
|
