585b3b37c0
90crypt: call systemd commands only if systemd binaries are there
13 years ago
e064127729
add "rd.auto" parameter and switch off automatic assembly
...
No automatic assembly is done anymore by default. You will have to
specify exactly what devices to assemble
("rd.md.uuid=" "rd.luks.uuid" ...)
or use "rd.auto=1" or "rd.auto" on the kernel command line.
For big servers with thousands of disks we don't want to assemble
everything by default (error prone, slow).
13 years ago
3722020071
crypt/crypt-run-generator.sh: add allow-discards to options in crypttab
13 years ago
3d12d7a2cc
crypt: install /etc/crypttab only in host-only mode
13 years ago
8a7f561ee5
crypt: do not run systemd crypt generator
...
"systemctl daemon-reload" does it already for us
13 years ago
3d3c192621
crypt/crypt-run-generator.sh: check if crypttab exists
13 years ago
92b3ee855f
removed finished-ask-password.sh
13 years ago
3f7e5358e5
crypt/crypt-run-generator.sh: do not add already existing luks
13 years ago
3d352f5228
crypt: add systemd crypt support
13 years ago
aefea76cf8
set DRACUT_SYSTEMD for systemd mode in the initramfs
13 years ago
68e7661ca7
deprecate old command line options
13 years ago
e88e3b2797
91crypt-loop: replace basename calls with string matching
13 years ago
df68781fca
91crypt-loop: use initqueue for cleanup strategy
13 years ago
c5758f2090
90crypt: enhance crypt-lib keydev mounting
...
Combining $keydev and $keypath should result in a unique, re-usable keydev
mountpoint. mkuniqdir doesn't seem to have any an advantage here and lacks
reusability. Is there ever a use case where these are true:
* there are more than one rd.luks.key=$keypath:$keydev
* one is actually different from the other
13 years ago
3e9b4330a9
90crypt: recognize .img as loop key container
13 years ago
53fe81e752
modules.d/*/module-setup.sh: combine and specify type for installs
...
To speedup image creation, combine dracut_install calls and specify the exact type.
E.g. inst_script instead of the generic inst.
13 years ago
4d0f1d7b28
modules.d/*/module-setup.sh: no more sourcing of dracutfunctions
13 years ago
5ad3803dac
crypt: add rd.luks.allow-discards and honor options in crypttab
...
also fixed the retry loop for rd.luks.key
13 years ago
eef7649e71
merge "cleanup" and "pre-pivot-cleanup" hooks
13 years ago
1bd76bf981
move cleanup scripts to pre-pivot-cleanup hook
...
below cleanup scripts is moved:
40network: kill-dhclient.sh
90crypt: crypt-cleanup.sh
90multipath: multipathd-stop.sh
95iscsi: cleanup-iscsi.sh
95nfs: nfsroot-cleanup.sh
Signed-off-by: Dave Young <dyoung@redhat.com>
13 years ago
8d021e4b8a
90crypt/parse-crypt.sh: simplify rd.luks.uuid testing
13 years ago
004fd0557d
host-only checks corrected and kernel_only mode
...
In kernel_only mode, we don't want to write /etc/cmdline.d
Correctly return the check functions, so we have a valid return of
for_each_host_dev_fs().
mdraid and dmraid functions had wrong checkings for the filesystem
type.
13 years ago
fb67e4aa36
shutdown on demand
...
Do not save and restore the initramfs, but instead, just unpack the
default initramfs for shutdown on shutdown.
13 years ago
96b8d60a9b
dracut: precreate "${initdir}/etc/cmdline.d"
13 years ago
6aafdc5c04
90crypt/crypt-cleanup.sh: send unneeded output to /dev/null
13 years ago
5f282199c8
90crypt/module-setup.sh: prepend "luks-" to hostonly cmdline file
13 years ago
1b7fd0fa3e
Check module dependencies of mount points
...
Like -H, we need to poll every module to check if it is needed
to mount a specific device in '--mount'.
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
13 years ago
480d772f22
*/module-setup.sh: use host_fs_types host_devs
...
For the $hostonly case, use $host_fs_types and $host_devs to determine,
if a module has to be included in the initramfs.
13 years ago
1939a4f96e
99fs-lib/fs-lib.sh: accept "UUID=" and "LABEL=" for fsck_single
...
with the reuse of crypt-lib.sh devnames() and putting it in
dracut-lib.sh, fsck_single() can use more generic names from /etc/fstab
13 years ago
4e05cb4023
cryptroot-ask.sh: use key file, if specified in crypttab and present
...
if a key file is specified in crypttab and present in the initramfs use
it to open the device.
https://bugzilla.redhat.com/show_bug.cgi?id=751640
13 years ago
2c0b5281f5
90crypt/parse-crypt.sh: also accept the beginning of the LUKS UUID
...
2e0c003435
14 years ago
2e0c003435
luks key on ext dev - wait for luks
...
This really waits for the luks mapper device, so luksOpen can do it job
14 years ago
1f735f82cc
crypt: changed cmdline arg name from rd.luks.tout to rd.luks.key.tout
14 years ago
c70f6415f8
luks key on ext dev - wait for luks
...
This asks for the luks passphrase if key is not found for defined time (if defined with rd.luks.tout cmd line):
modules.d/90crypt/cryptroot-ask.sh | 21 ++++++++++++++++++---
modules.d/90crypt/parse-crypt.sh | 5 +++--
2 files changed, 21 insertions(+), 5 deletions(-)
14 years ago
581dd40e73
90crypt: ask_for_password pings plymouthd
...
If plymouthd is not started, ask_for_password shouldn't try to prompt
for password with GUI and should use text prompt instead.
14 years ago
4a049ce556
add x-bit to *.sh
14 years ago
e59f58f854
use inst_simple to install non-binary files
14 years ago
b52294d00b
crypt: dropped plymouth --has-active-vt check on passwd prompt
...
As Ray Strode explains, plymouth --has-active-vt may fail if the user
passes console=ttyS0 or something other not corresponding to
console=tty0, because plymouth is outputing to the serial console and
not a VT in this case.
14 years ago
565f6fb675
crypt/crypt-lib.sh: s/.console.lock/.console_lock/g
...
In the initrd, the init script and the sbin/cryptroot-ask script use
flock with different lock files for the console: /.console_lock and
/.console.lock respectively
14 years ago
29b10e65b1
dracut-functions: make local vars local and prefix with "_"
14 years ago
3b403b32fc
removed trailing whitespaces
14 years ago
3909d7edfc
crypt: functions for ask-for-password and reading key
...
Asking for password and reading key parts are moved to separate
functions in crypt-lib.sh: ask_for_password and readkey.
14 years ago
2f95d699dc
crypt-lib.sh: 'command -v' preferred over 'type'
14 years ago
f024bf0dcd
base, crypt: install umount, because it is used
14 years ago
8234b92d85
crypt/cryptroot-ask.sh: check and use NEWROOT
14 years ago
6730280c5b
crypt/parse-crypt.sh: fixed rule creation
...
"\n" was missing
create rules file on tmp file and rename it later
14 years ago
fb59f4c967
get rid of absolute PATHs
14 years ago
ea8ca78af0
crypt/parse-crypt.sh: fix udev rule creation
14 years ago
0b53ca70b6
Move all hooks to "$hookdir"
...
hookdir=/lib/dracut/hooks for now, to keep the root directory clean
14 years ago
c9f1e3d1f4
check for getarg() function before sourcing dracut-lib.sh
...
make use of "type getarg" to check, if we really need to source
dracut-lib.sh
14 years ago
Amadeusz Żołnowski