1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192 |
- #!/bin/bash
- #
- # Copyright (c) 2017 Shawn Rose
- # Author: Shawn Rose <shawnandrewrose@gmail.com>
- #
- # This program is free software: you can redistribute it and/or modify
- # it under the terms of the GNU General Public License as published by
- # the Free Software Foundation, either version 3 of the License, or
- # (at your option) any later version.
- #
- # This program is distributed in the hope that it will be useful,
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- # GNU General Public License for more details.
- #
- # You should have received a copy of the GNU General Public License
- # along with this program. If not, see <http://www.gnu.org/licenses/>.
- #
- PREREQ="cryptroot"
- prereqs()
- {
- echo "$PREREQ"
- }
- case $1 in
- prereqs)
- prereqs
- exit 0
- ;;
- esac
- . @initramfstoolsdir@/hook-functions
- die() {
- code="$1"
- msg="$2"
- echo " (ERROR): $msg" >&2
- exit $1
- }
- find_binary() {
- bin_name="$1"
- resolved=$(which ${bin_name})
- [ -z "$resolved" ] && die 1 "Unable to find ${bin_name}"
- echo "$resolved"
- }
- if [ -n "${FORCE_CLEVIS}" ] && [ "${FORCE_CLEVIS}" != "n" ]; then
- for f in /sbin/cryptsetup /sbin/dmsetup /lib/cryptsetup/askpass; do
- if [ ! -e "${DESTDIR}${f}" ]; then
- die 2 "cryptsetup utility '$f' wasn't found in the generated ramdisk image. "
- fi
- done
- fi
- copy_exec @bindir@/clevis-decrypt-tang || die 1 "@bindir@/clevis-decrypt-tang not found"
- copy_exec @bindir@/clevis-decrypt-sss || die 1 "@bindir@/clevis-decrypt-sss not found"
- copy_exec @bindir@/clevis-decrypt || die 1 "@bindir@/clevis-decrypt not found"
- copy_exec @bindir@/clevis-luks-common-functions || die 1 "@bindir@/clevis-luks-common-functions not found"
- copy_exec @bindir@/clevis-luks-list || die 1 "@bindir@/clevis-luks-list not found"
- if [ -x @bindir@/clevis-decrypt-tpm2 ]; then
- copy_exec @bindir@/clevis-decrypt-tpm2 || die 1 "@bindir@/clevis-decrypt-tpm2 not found"
- tpm2_creatprimary_bin=$(find_binary "tpm2_createprimary")
- tpm2_unseal_bin=$(find_binary "tpm2_unseal")
- tpm2_load_bin=$(find_binary "tpm2_load")
- copy_exec "${tpm2_creatprimary_bin}" || die 1 "Unable to copy ${tpm2_creatprimary_bin}"
- copy_exec "${tpm2_unseal_bin}" || die 1 "Unable to copy ${tpm2_unseal_bin}"
- copy_exec "${tpm2_load_bin}" || die 1 "Unable to copy ${tpm2_load_bin}"
- for _LIBRARY in @libdir@/libtss2-tcti-device.so*; do
- if [ -e "${_LIBRARY}" ]; then
- copy_exec "${_LIBRARY}" || die 2 "Unable to copy ${_LIBRARY}"
- fi
- done
- fi
- luksmeta_bin=$(find_binary "luksmeta")
- jose_bin=$(find_binary "jose")
- copy_exec "${luksmeta_bin}" || die 2 "Unable to copy ${luksmeta_bin}"
- copy_exec "${jose_bin}" || die 2 "Unable to copy ${jose_bin}"
- copy_exec @bindir@/clevis || die 1 "@bindir@/clevis not found"
- curl_bin=$(find_binary "curl")
- awk_bin=$(find_binary "awk")
- bash_bin=$(find_binary "bash")
- copy_exec "${curl_bin}" || die 2 "Unable to copy ${curl_bin} to initrd image"
- copy_exec "${awk_bin}" || die 2 "Unable to copy ${awk_bin} to initrd image"
- copy_exec "${bash_bin}" || die 2 "Unable to copy ${bash_bin} to initrd image"
|