Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Encrypted Volumes #100

Merged
merged 8 commits into from
Jun 11, 2020
Merged

Encrypted Volumes #100

merged 8 commits into from
Jun 11, 2020

Commits on Jun 11, 2020

  1. Add basic support for managing LUKS volumes.

    @dwlehman
    dwlehman committed Jun 11, 2020
    Configuration menu
    Copy the full SHA
    6acad11 View commit details
    Browse the repository at this point in the history

  2. Add logic required to associate existing LUKS devices w/ volumes.

    @dwlehman
    dwlehman committed Jun 11, 2020
    Configuration menu
    Copy the full SHA
    b0753d2 View commit details
    Browse the repository at this point in the history

  3. Add some special handling for volumes' LUKS layer. 

    This probably merits an explanation. In blivet, the backing device
will have a format of type 'luks'. This is the encrypted, or
backing, device. The next layer out is a LUKSDevice, which
represents the (decrypted/open) device-mapper device. Because the
LUKS layer is optional and can be effectively toggled, there are
many occasions on which it is convenient to look past the LUKS
layer directly to the backing device. For this purpose, all of
blivet's StorageDevice classes have a 'raw_device' property. For
unexcrypted leaf devices, the raw device is the same as the actual
device. For encrypted leaf devices, the raw device points to the
backing device.

In other words, adding _raw_device establishes a line between the
raw/backing/encrypted device and the decrypted/mapped/open device
which makes test validation quite a bit easier.
    @dwlehman
    dwlehman committed Jun 11, 2020
    Configuration menu
    Copy the full SHA
    236b12b View commit details
    Browse the repository at this point in the history

  4. Only deactivate mounted fs and swap in preparing the action queue. 

    Doing so for all formats can trigger deactivation of device stacks
that needlessly complicates things.
    @dwlehman
    dwlehman committed Jun 11, 2020
    Configuration menu
    Copy the full SHA
    4208f47 View commit details
    Browse the repository at this point in the history

  5. Add a _create method to BlivetDiskVolume. 

    Relying on _reformat to create the formatting worked because a
DiskDevice always exists. Now that self._device can be an
optional, non-existent, LUKS layer on top of the disk we have to
make the disk volume class behave more like the other volume
classes -- namely, it has to create its format as part of _create
since we will not always call _reformat (eg: when we've set up,
but not yet created, a new LUKS layer on the disk).
    @dwlehman
    dwlehman committed Jun 11, 2020
    Configuration menu
    Copy the full SHA
    c764dd8 View commit details
    Browse the repository at this point in the history

  6. Manage mounts in two stages to keep systemd cooperative.

    @dwlehman
    dwlehman committed Jun 11, 2020
    Configuration menu
    Copy the full SHA
    9ab01a8 View commit details
    Browse the repository at this point in the history

  7. Manage /etc/crypttab entries for encrypted volumes.

    @dwlehman
    dwlehman committed Jun 11, 2020
    Configuration menu
    Copy the full SHA
    485f10b View commit details
    Browse the repository at this point in the history

  8. Call out jmespath requirement for molecule.

    @dwlehman
    dwlehman committed Jun 11, 2020
    Configuration menu
    Copy the full SHA
    178c4d6 View commit details
    Browse the repository at this point in the history