V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

lib/cdi_0100_arg/0105_arg_nuke_converter.sh

@@ -16,46 +16,43 @@ guard_sourcing
 # Generates 'nuke=HASH' Bootparameter.
 # Globals:
 #   DIR_CNF
-#   ERR_READ_NUKE_FILE
-#   VAR_DEBUG_TRACE
 #   VAR_NUKE_HASH
 # Arguments:
 #   None
 # Returns:
 #   0: on success
+#   ERR_GENERATE_SALT
 #   ERR_READ_NUKE_FILE
 #######################################
 nuke_passphrase() {
   declare -r var_nuke_pwd_file="${DIR_CNF}/password_luks_nuke.txt"
-  declare    var_temp_nuke_hash="" var_temp_plain_nuke_pwd="" var_salt=""
+  declare    var_temp_nuke_hash="" var_temp_plain_nuke_pwd="" var_salt="" var_nuke_rounds=""
+
+  # shellcheck disable=SC2016,SC2312
+  var_nuke_rounds="$(
+    yq -r '
+    paths(scalars) as $p
+    | select( ($p|last|tostring) | test("_nuke_rounds$") )
+    | getpath($p)
+    ' "${DIR_CNF}/preseed.yaml" | head -n1
+  )"
 
   [[ ! -f "${var_nuke_pwd_file}" ]] && return 0
 
-  ### TODO: PASSWORD REMINDER START
   guard_trace on
-
   if ! read_password_file "${var_nuke_pwd_file}" var_temp_plain_nuke_pwd; then
-
     return "${ERR_READ_NUKE_FILE}"
-
   fi
-
-  ### TODO: PASSWORD REMINDER STOP
   guard_trace off
 
+
   if ! var_salt="$(generate_salt)"; then
-
     return "${ERR_GENERATE_SALT}"
-
   fi
 
 
-  ### TODO: PASSWORD REMINDER START
   guard_trace on
-
-  var_temp_nuke_hash=$(mkpasswd --method=sha-512 --salt="${var_salt}" --rounds="${VAR_NUKE_ROUNDS:-8388608}" "${var_temp_plain_nuke_pwd}")
-
-  ### TODO: PASSWORD REMINDER STOP
+  var_temp_nuke_hash=$(mkpasswd --method=sha-512 --salt="${var_salt}" --rounds="${var_nuke_rounds:-8388608}" "${var_temp_plain_nuke_pwd}")
   guard_trace off
 
   declare -grx VAR_NUKE_HASH="${var_temp_nuke_hash}"