Alfonso Sánchez-Beato 1708bc105e secboot: avoid usage of fifos with cryptsetup ...

Using a fifo pipe and a goroutine with "cryptsetup luksAddKey" is
unnecessary, as both the existing key and the new key can be provided
via stdin to cryptsetup. Additionally, this add the --batch-mode
option when calling cryptsetup so warnings printed by cryptsetup in
23.10 do not mess the parsing of the returned message. Fixes
LP#2036631, being this an alternative solution to [1] (although the
latter would still need to use the --batch-mode option).

[1] https://github.com/snapcore/snapd/pull/12935

2023-10-06 12:08:41 +02:00

..

export_test.go

secboot/keymgr: stage and transition encryption keys

2022-06-09 15:34:39 +02:00

keymgr_luks2_test.go

secboot: avoid usage of fifos with cryptsetup

2023-10-06 12:08:41 +02:00

keymgr_luks2.go

secboot/keymgr: typo fixes and comment tweaks

2022-06-10 12:43:42 +02:00