Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
@@ -14,8 +14,6 @@
|
|||||||
# SPDX-PackageName: CISS.debian.live.builder
|
# SPDX-PackageName: CISS.debian.live.builder
|
||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
# ToDo: Remove Debug
|
|
||||||
|
|
||||||
# Module summary:
|
# Module summary:
|
||||||
# - Runs after the encrypted live root filesystem has been decrypted.
|
# - Runs after the encrypted live root filesystem has been decrypted.
|
||||||
# - Requires the pinned public key, external rootfs attestation manifest, and detached signature to exist as readable,
|
# - Requires the pinned public key, external rootfs attestation manifest, and detached signature to exist as readable,
|
||||||
@@ -26,24 +24,9 @@
|
|||||||
# - Panics on missing, malformed, unauthentic, or mismatched evidence.
|
# - Panics on missing, malformed, unauthentic, or mismatched evidence.
|
||||||
|
|
||||||
# set -eu
|
# set -eu
|
||||||
PS4='+ 0042(): '
|
|
||||||
set -x
|
|
||||||
|
|
||||||
printf "\e[95m[INFO] Starting : [/usr/lib/live/boot/0042_ciss_post_decrypt_attest] \n\e[0m"
|
printf "\e[95m[INFO] Starting : [/usr/lib/live/boot/0042_ciss_post_decrypt_attest] \n\e[0m"
|
||||||
|
|
||||||
ciss_debug_countdown=8
|
|
||||||
while [ "${ciss_debug_countdown}" -gt 0 ]; do
|
|
||||||
|
|
||||||
printf "\e[93m[DEBUG] 0042() countdown : %s seconds \n\e[0m" "${ciss_debug_countdown}"
|
|
||||||
sleep 1
|
|
||||||
ciss_debug_countdown=$((ciss_debug_countdown - 1))
|
|
||||||
|
|
||||||
done
|
|
||||||
|
|
||||||
printf "\e[93m[DEBUG] 0042() reached : countdown finished. \n\e[0m"
|
|
||||||
|
|
||||||
sleep 3
|
|
||||||
|
|
||||||
### Declare variables ----------------------------------------------------------------------------------------------------------
|
### Declare variables ----------------------------------------------------------------------------------------------------------
|
||||||
|
|
||||||
### Will be replaced at build time:
|
### Will be replaced at build time:
|
||||||
|
|||||||
@@ -498,17 +498,6 @@ setup_unionfs ()
|
|||||||
### CISS override for /usr/lib/live/boot/0042_ciss_post_decrypt_attest -------------------------------------------------------
|
### CISS override for /usr/lib/live/boot/0042_ciss_post_decrypt_attest -------------------------------------------------------
|
||||||
printf "\e[95m[INFO] Calling : [/usr/lib/live/boot/0042_ciss_post_decrypt_attest] ... \n\e[0m"
|
printf "\e[95m[INFO] Calling : [/usr/lib/live/boot/0042_ciss_post_decrypt_attest] ... \n\e[0m"
|
||||||
|
|
||||||
# ToDo: Remove debug.
|
|
||||||
|
|
||||||
ciss_debug_countdown=8
|
|
||||||
while [ "${ciss_debug_countdown}" -gt 0 ]; do
|
|
||||||
|
|
||||||
printf "\e[93m[DEBUG] 9990() countdown : %s seconds \n\e[0m" "${ciss_debug_countdown}"
|
|
||||||
sleep 1
|
|
||||||
ciss_debug_countdown=$((ciss_debug_countdown - 1))
|
|
||||||
|
|
||||||
done
|
|
||||||
|
|
||||||
chmod +x /usr/lib/live/boot/0042_ciss_post_decrypt_attest
|
chmod +x /usr/lib/live/boot/0042_ciss_post_decrypt_attest
|
||||||
|
|
||||||
if [ -x /usr/lib/live/boot/0042_ciss_post_decrypt_attest ]; then
|
if [ -x /usr/lib/live/boot/0042_ciss_post_decrypt_attest ]; then
|
||||||
|
|||||||
Reference in New Issue
Block a user