misc/dracut_90reencrypt/parse-reencrypt.sh

   1 #!/bin/sh
   2
   3 REENC=$(getargs rd_REENCRYPT=)
   4 REENC_DEV=$(echo $REENC | sed 's/:.*//')
   5 REENC_SIZE=$(echo $REENC | sed -n 's/.*://p')
   6
   7 REENC_KEY=$(getargs rd_REENCRYPT_KEY=)
   8 if [ -z "$REENC_KEY" ] ; then
   9     REENC_KEY=none
  10 fi
  11
  12 if [ -n "$REENC_DEV" ] ; then
  13 {
  14    printf 'SUBSYSTEM!="block", GOTO="reenc_end"\n'
  15    printf 'ACTION!="add|change", GOTO="reenc_end"\n'
  16    printf 'KERNEL!="%s", GOTO="reenc_end"\n' $REENC_DEV
  17    printf 'ENV{ID_FS_TYPE}=="crypto_LUKS", RUN+="/sbin/initqueue \
  18            --unique --onetime --name crypt-reencrypt-%%k \
  19            /sbin/reencrypt $env{DEVNAME} %s"\n' "$REENC_KEY $REENC_SIZE"
  20    printf 'LABEL="reenc_end"\n'
  21 } > /etc/udev/rules.d/69-reencryption.rules
  22 fi