V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m46s
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m46s
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
@@ -229,8 +229,8 @@ mount_partition() {
|
|||||||
|
|
||||||
var_partuuid="${HMP_PATH_PARTUUID["${var_mount_path}"]}"
|
var_partuuid="${HMP_PATH_PARTUUID["${var_mount_path}"]}"
|
||||||
|
|
||||||
cryptsetup open --type plain --hash=plain \
|
cryptsetup open --type plain \
|
||||||
--key-file /dev/urandom --keyfile-size 64 \
|
--key-file /dev/urandom \
|
||||||
--cipher aes-xts-plain64 --key-size 512 \
|
--cipher aes-xts-plain64 --key-size 512 \
|
||||||
"/dev/disk/by-partuuid/${var_partuuid}" "${var_encryption_label}"
|
"/dev/disk/by-partuuid/${var_partuuid}" "${var_encryption_label}"
|
||||||
|
|
||||||
@@ -249,8 +249,8 @@ mount_partition() {
|
|||||||
|
|
||||||
var_partuuid="${HMP_PATH_PARTUUID["${var_mount_path}"]}"
|
var_partuuid="${HMP_PATH_PARTUUID["${var_mount_path}"]}"
|
||||||
|
|
||||||
cryptsetup open --type plain --hash=plain \
|
cryptsetup open --type plain \
|
||||||
--key-file /dev/urandom --keyfile-size 64 \
|
--key-file /dev/urandom \
|
||||||
--cipher aes-xts-plain64 --key-size 512 \
|
--cipher aes-xts-plain64 --key-size 512 \
|
||||||
"/dev/disk/by-partuuid/${var_partuuid}" "${var_encryption_label}"
|
"/dev/disk/by-partuuid/${var_partuuid}" "${var_encryption_label}"
|
||||||
|
|
||||||
|
|||||||
@@ -46,7 +46,7 @@ readonly -f write_crypttab
|
|||||||
# TARGET
|
# TARGET
|
||||||
# VAR_DROPBEAR
|
# VAR_DROPBEAR
|
||||||
# Arguments:
|
# Arguments:
|
||||||
# None
|
# None
|
||||||
# Returns:
|
# Returns:
|
||||||
# 0: on success
|
# 0: on success
|
||||||
#######################################
|
#######################################
|
||||||
@@ -125,17 +125,15 @@ EOF
|
|||||||
case "${var_key,,}" in
|
case "${var_key,,}" in
|
||||||
|
|
||||||
swap)
|
swap)
|
||||||
write_crypttab "${var_ephemeral_enclabel}" "PARTUUID=${var_host_partuuid}" "/dev/urandom" "plain,cipher=aes-xts-plain64,size=512,hash=plain,keyfile-size=64,discard,swap"
|
write_crypttab "${var_ephemeral_enclabel}" "PARTUUID=${var_host_partuuid}" "/dev/urandom" "swap,cipher=aes-xts-plain64,size=512,discard"
|
||||||
;;
|
;;
|
||||||
|
|
||||||
/tmp)
|
/tmp)
|
||||||
write_crypttab "${var_ephemeral_enclabel}" "PARTUUID=${var_host_partuuid}" "/dev/urandom" "plain,cipher=aes-xts-plain64,size=512,hash=plain,keyfile-size=64,discard"
|
write_crypttab "${var_ephemeral_enclabel}" "PARTUUID=${var_host_partuuid}" "/dev/urandom" "plain,cipher=aes-xts-plain64,size=512,discard"
|
||||||
chroot_script "${TARGET}" "systemctl mask tmp.mount"
|
chroot_script "${TARGET}" "systemctl unmask tmp.mount"
|
||||||
do_log "info" "file_only" "4210() Executed: [systemctl mask tmp.mount]"
|
do_log "info" "file_only" "4210() Executed: [systemctl unmask tmp.mount]"
|
||||||
#chroot_script "${TARGET}" "systemctl unmask tmp.mount"
|
chroot_script "${TARGET}" "systemctl disable tmp.mount"
|
||||||
#do_log "info" "file_only" "4210() Executed: [systemctl unmask tmp.mount]"
|
do_log "info" "file_only" "4210() Executed: [systemctl disable tmp.mount]"
|
||||||
#chroot_script "${TARGET}" "systemctl disable tmp.mount"
|
|
||||||
#do_log "info" "file_only" "4210() Executed: [systemctl disable tmp.mount]"
|
|
||||||
;;
|
;;
|
||||||
|
|
||||||
*)
|
*)
|
||||||
|
|||||||
Reference in New Issue
Block a user