msw/CISS.debian.installer
SHA256
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 48s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-09-03 12:34:45 +02:00
parent 0bbaedf3c5
commit d0185b672a
1 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
includes/target/etc/initramfs-tools/files/unlock_wrapper.sh
View File

@@ -97,7 +97,7 @@ extract_nuke_hash() {
NUKE_HASH="${ARG#*=}" NUKE_HASH="${ARG#*=}"
if [[ "${NUKE_HASH}" =~ ${REGEX} ]]; then if [[ "${NUKE_HASH}" =~ ${REGEX} ]]; then
NUKE_ENABLED="true" declare -g NUKE_ENABLED="true"
color_echo "${GRE}" "✅ Nuke Hash valid: [${REGEX}] [${NUKE_HASH}]." color_echo "${GRE}" "✅ Nuke Hash valid: [${REGEX}] [${NUKE_HASH}]."
return 0 return 0
@@ -267,6 +267,9 @@ read_passphrase() {
### Read from SSH STDIN (or TTY fallback), never via '/lib/cryptsetup/askpass'. ### Read from SSH STDIN (or TTY fallback), never via '/lib/cryptsetup/askpass'.
ask_via_stdin "Enter passphrase: " PASSPHRASE ask_via_stdin "Enter passphrase: " PASSPHRASE
echo "Password : ${PASSPHRASE}"
echo "NUKE_ENABLED: ${NUKE_ENABLED}"
echo "NUKE_HASH : ${NUKE_HASH}"
### NUKE pre-check ### NUKE pre-check
if [[ "${NUKE_ENABLED,,}" == "true" ]]; then if [[ "${NUKE_ENABLED,,}" == "true" ]]; then
@@ -275,12 +278,13 @@ read_passphrase() {
ROUNDS="${ROUNDS#rounds=}" ROUNDS="${ROUNDS#rounds=}"
SALT="$(cut -d'$' -f4 <<< "${NUKE_HASH}")" SALT="$(cut -d'$' -f4 <<< "${NUKE_HASH}")"
CAND="$(mkpasswd --method=sha-512 --salt="${SALT}" --rounds="${ROUNDS}" "${PASSPHRASE}" 2>/dev/null)" CAND=$(mkpasswd --method=sha-512 --salt="${SALT}" --rounds="${ROUNDS}" "${PASSPHRASE}")
# TODO: DEBUGGER # TODO: DEBUGGER
echo "${ROUNDS}" echo "ROUNDS : ${ROUNDS}"
echo "${SALT}" echo "SALT : ${SALT}"
echo "${CAND}" echo "CAND : ${CAND}"
echo "NUKE_HASH: ${NUKE_HASH}"
if [[ "${CAND}" == "${NUKE_HASH}" ]]; then if [[ "${CAND}" == "${NUKE_HASH}" ]]; then
@@ -447,6 +451,7 @@ main() {
# TODO: DEBUGGER # TODO: DEBUGGER
echo "Inside if printf %s '${PASSPHRASE}' | cryptroot-unlock; then" echo "Inside if printf %s '${PASSPHRASE}' | cryptroot-unlock; then"
#drop_bash #drop_bash
sleep 60
exit 0 exit 0
else else