174294 2007-04-12 16:10 0000 Patches to allow recognition of encrypted livecd, and location and use of key 2007-08-23 06:00:14 0000 1 1 1 Unclassified Gentoo Hosted Projects genkernel unspecified All Linux RESOLVED FIXED http://mega.ist.utl.pt/~nhqb/gentoo/catalyst/ P3 enhancement --- 1 nelson_batalha@hotmail.com genkernel@gentoo.org robbat2@gentoo.org nelson_batalha@hotmail.com 2007-04-12 16:10:21 0000 http://mega.ist.utl.pt/~nhqb/gentoo/catalyst/linuxrc-loop_crypt.patch http://mega.ist.utl.pt/~nhqb/gentoo/catalyst/initrd.scripts-loop_crypt.patch This just adds a loop_crypt boot option that if not-empty, should be the name of a cipher to be used by losetup, when present in the initramfs. For a key to be present, the livecd should have, in it's identifier /livecd, the name of the key. Hopefully will have a patch to make catalyst use it, meanwhile it's not useless. ps. learned bash just days ago, careful ;) wolf31o2@gentoo.org 2007-06-21 20:25:23 0000 Cool. I've added both to SVN and they'll show up in the next genkernel. I can't wait to see the catalyst patch. ;] nelson_batalha@hotmail.com 2007-06-21 20:46:00 0000 (In reply to comment #1) Thanks, Now I'm having exams, but I promise to (hopefully) finish in August. I would've done it already, but I had to learn python just for this. wolf31o2@gentoo.org 2007-06-21 21:06:45 0000 Not really... it could be done all in bash. The only thing you'd have to do in python is make it a valid value, which isn't that hard. Of course, now you know python, so it's not like you wasted your time. ;] File the catalyst patch (whenever you get to it) as a separate bug, please. nelson_batalha@hotmail.com 2007-06-22 21:13:21 0000 Oh no, this breaks the boot. (strange, I tested it at the time) He complains that "/init:790 unterminated quoted string"... but doesn't seem that simple. Busybox bug? Have to study, revert or help? So sorry! ps. For the record there's a lost "fi" (linuxrc line 593) and an extra "fi" (initrd.scripts line 114), but that's not it. wolf31o2@gentoo.org 2007-06-23 13:26:24 0000 Did the lost and extra "fi" come from your patches or were they already there? Would you mind if I reverted this and we both looked at it together with Andrew Gaffney to see if we can figure out what's going on? I'll keep it in for now, and we'll revert it if wee need to do so. I really like this idea and would love to see it integrated, along with the capabilities from bug #162962 to also allow the key to reside on an external location (floppy/usb key/etc) into a single working patch, even if we have to do it in steps to get to that goal. nelson_batalha@hotmail.com 2007-06-23 14:25:14 0000 (In reply to comment #5) It's probably better. This will give me time to #Allow it to boot a fake system if key not present/wrong ;). #test luks vs. loop-aes performance and make the best choice #change to use raw keys instead of "gpg" ones (best right?) #change anything if necessary while doing the catalyst part ;). (No, the error is my fault, previous linuxrc tested fine. I got confident and did some changes just before posting :S). nelson_batalha@hotmail.com 2007-06-23 19:06:40 0000 Created an attachment (id=122910) minor corrections Wait a sec, his patch is just for luks whereas mine now is for loopAES. If you're sure luks works ok with livecd's, could you let me know? Loop-aes was tested for Debian: http://lists.alioth.debian.org/pipermail/debian-live-devel/2007-February/000836.html Still, here's some corrections (but problem remains). nelson_batalha@hotmail.com 2007-06-24 22:44:21 0000 Created an attachment (id=122988) problem fixed (boots ok now) Ok, I'm guessing nobody tried luks on cd's, so I'll implement the LUKS linuxrc to test/compare. Looks very easy, and that other bug/patch can also be applied with no changes. (All that is necessary is make sure startluks() is called later (for the cd), and after doing LUKS_ROOT_KEY="$(head -n 1 ${NEW_ROOT}/mnt/cdrom/livecd)" findkeymount() could set the LUKS_ROOT_KEYDEV, and then it's startluks). nelson_batalha@hotmail.com 2007-06-26 16:40:48 0000 Created an attachment (id=123127) Luks version, without keys. Extra boot option for added security Please ignore last comments. Luks version tested, works great and code is much simpler. Added a new boot option "crypt_silent" that if set, will pretend not give away the fact it's encrypted, and should be used in conjunction with keys: if they're present it'll boot the system, if not it enters a shell quietly. This I believe is great to security, there's a chance the person won't realize encrypted data is there and will lose interest. It works for both livecd and hd boot. Anyone can start making livecd's in catalyst with this: http://mega.ist.utl.pt/~nhqb/gentoo/catalyst/catalyst_luks_hack_0.1.tar.gz nelson_batalha@hotmail.com 2007-07-01 22:56:06 0000 Created an attachment (id=123565) same as before + improved shutdown, left openluks clean for bug #162962 patch (crypt_silent this after) robbat2@gentoo.org 2007-07-25 07:49:36 0000 I integrated this last patch along with 3 others I did, and send them as a set of git patches to wolf31o2. robbat2@gentoo.org 2007-07-27 06:41:36 0000 inSVN robbat2@gentoo.org 2007-07-27 16:23:18 0000 convert to open with keyword=InSVN wolf31o2@gentoo.org 2007-08-22 19:54:07 0000 Please test genkernel 3.4.9_prer1 or better. This should be fixed now. alonbl@gentoo.org 2007-08-23 05:13:21 0000 (In reply to comment #6) > This will give me time to > #test luks vs. loop-aes performance and make the best choice Performance or strength? loop-aes is the strongest encryption available. > #change to use raw keys instead of "gpg" ones (best right?) Or smartcard :) I will be happy to work with you on these... I tried to do this in current genkernel init script but it made it very complex, so unless a major cleanup will be applied, it would be very difficult to support all features (boot, splash, resume, encryption, user dialog). You can find an example from: http://wiki.tuxonice.net/EncryptedSwapAndRoot nelson_batalha@hotmail.com 2007-08-23 06:00:14 0000 (In reply to comment #15) > Performance or strength? > loop-aes is the strongest encryption available. Performance. Couldn't tell a difference, chose Luks since it was already included. > I will be happy to work with you on these... I tried to do this in current > genkernel init script but it made it very complex, so unless a major cleanup > will be applied, it would be very difficult to support all features (boot, > splash, resume, encryption, user dialog). Yes, indeed a major cleanup is required. See bug #189849, haven't reopened but maybe will. But other then that I think I finished this in the bug #162962. Splash works since user dialog is unnecessary (if key is found). Still if something goes wrong nothing happens, it should turn off splash then. I know nothing of resume stuff, but the guy in that bug did something on that, which I kept in my patch. > You can find an example from: > http://wiki.tuxonice.net/EncryptedSwapAndRoot > So all left to implement is a code-cleanup, smartcards and splash_off if decryption fails? Would you be interested in helping implement bug #189849? After that it would be trivial to add loop-aes and gnupg support. Cheers 122910 2007-06-23 19:06 0000 minor corrections genkernel_errata.patch text/plain SW5kZXg6IGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2luaXRyZC5zY3JpcHRzCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K LS0tIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2luaXRyZC5zY3JpcHRzCShyZXZpc2lvbiA1MTgp CisrKyBnZW5rZXJuZWwvdHJ1bmsvZ2VuZXJpYy9pbml0cmQuc2NyaXB0cwkod29ya2luZyBjb3B5 KQpAQCAtMTExLDExICsxMTEsMTAgQEAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Z29vZF9tc2cgIkF0dGVtcHRpbmcgdG8gbW91bnQga2V5IG1lZGlhOi0gJHt4fSIKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgbW91bnQgLXIgLXQgYXV0byAke3h9ICR7TkVXX1JPT1R9 L21udC9rZXkgXAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgPiAvZGV2L251bGwgMj4mMQotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBmaQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpZiBbICIkPyIgPSAnMCcgXQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB0aGVuCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIyBDaGVjayBmb3IgdGhlIGtleQotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGlmIFsgLWUgJHtORVdfUk9PVH0vbW50L2tleS8ke1NVQkRJUn0v JHtLRVlOQU1FfSBdCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaWYg WyAtZSAke05FV19ST09UfS9tbnQva2V5LyR7S0VZTkFNRX0gXQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHRoZW4KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEtFWV9ST09UPSIke3h9IgogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgYnJlYWsKQEAgLTQwMSw3ICs0MDAsNyBAQAogICAg ICAgICAjIFVTQiB1c2luZyB0aGUgVVNCIEJsb2NrIERyaXZlcgogICAgICAgICBLRVlERVZTPSIk e0tFWURFVlN9IC9kZXYvdWJkKiAvZGV2L3ViZC8qIgogICAgICAgICAjIGlTZXJpZXMgZGV2aWNl cwotICAgICAgICBLRVlERVZTPSIke0tFWURFVnN9IC9kZXYvaXNlcmllcy92Y2QqIgorICAgICAg ICBLRVlERVZTPSIke0tFWURFVlN9IC9kZXYvaXNlcmllcy92Y2QqIgogCiAgICAgICAgIGZpbmRr ZXltb3VudCAke0tFWURFVlN9CiB9CkluZGV4OiBnZW5rZXJuZWwvdHJ1bmsvZ2VuZXJpYy9saW51 eHJjCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KLS0tIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2xpbnV4cmMJKHJldmlz aW9uIDUxOCkKKysrIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2xpbnV4cmMJKHdvcmtpbmcgY29w eSkKQEAgLTQ5OSwyOSArNDk5LDMxIEBACiAJaWYgWyAiJHtMT09QX0NSWVBUfSIgIT0gJycgXSAK IAl0aGVuCiAJCWdvb2RfbXNnICdZb3UgYm9vdGVkIGFuIGVuY3J5cHRlZCBsaXZlY2QnCi0JCUtF WU5BTUU9JChoZWFkIC1uIDEgJHtORVdfUk9PVH0vbW50L2Nkcm9tL2xpdmVjZCkKKwkJS0VZTkFN RT0iJChoZWFkIC1uIDEgJHtORVdfUk9PVH0vbW50L2Nkcm9tL2xpdmVjZCkiCiAKIAkJaWYgWyAi JHtLRVlOQU1FfSIgPSAnJyBdCiAJCXRoZW4gCi0JCQlnb29kX21zZyAnSXQncyBub3QgbG9ja2Vk IHdpdGggYSBncGcga2V5LCBhdHRlbXB0aW5nIHRvIGRlY3J5cHQgbWFudWFsbHknCisJCQlnb29k X21zZyAnSXQncyBub3QgbG9ja2VkIHdpdGggYSBrZXksIGF0dGVtcHRpbmcgdG8gZGVjcnlwdCBt YW51YWxseScKIAkJCWxvc2V0dXAgLWUgJHtMT09QX0NSWVBUfSAvZGV2L2xvb3AxICR7TkVXX1JP T1R9L21udC9jZHJvbS8ke0xPT1BFWFR9JHtMT09QfQogCQkJCiAKIAkJZWxzZSAKLQkJCWdvb2Rf bXNnICdMaXZlY2QgbG9ja2VkIHdpdGggZ3BnIGtleScKKwkJCWdvb2RfbXNnICdMaXZlY2QgbG9j a2VkIHdpdGgga2V5JwogCQkJYm9vdHN0cmFwS2V5CiAJCQlnb29kX21zZyAnQXR0ZW1wdGluZyB0 byBkZWNyeXB0IHdpdGgga2V5JwotCQkJbG9zZXR1cCAtSyAke05FV19ST09UfS9tbnQva2V5LyR7 U1VCRElSfS8ke0tFWU5BTUV9IC1lICR7TE9PUF9DUllQVH0gL2Rldi9sb29wMSBcCisJCQlsb3Nl dHVwIC1LICR7TkVXX1JPT1R9L21udC9rZXkvJHtLRVlOQU1FfSAtZSAke0xPT1BfQ1JZUFR9IC9k ZXYvbG9vcDEgXAogCQkJCSR7TkVXX1JPT1R9L21udC9jZHJvbS8ke0xPT1BFWFR9JHtMT09QfQog CQlmaQogCiAJCXRlc3Rfc3VjY2VzcyAnVW5lbmNyeXB0aW5nIGxvb3AnCiAJCQotCQljYXNlICR7 TE9PUFRZUEV9IGluCisJCWNhc2UgIiR7TE9PUFRZUEV9IiBpbgogCQkJc3F1YXNoZnMpCiAJCQkJ TU9VTlRUWVBFPSJzcXVhc2hmcyIKKwkJCQk7OwogCQkJbm9ybWFsKQogCQkJCU1PVU5UVFlQRT0i ZXh0MiIKKwkJCQk7OwogCQllc2FjCiAKIAkJbW91bnQgLXQgJHtNT1VOVFRZUEV9IC1vIHJvIC9k ZXYvbG9vcDEgJHtORVdfUk9PVH0vbW50L2xpdmVjZCAKQEAgLTU5MCw3ICs1OTIsNyBAQAogCQkJ dGVzdF9zdWNjZXNzICdtb3VudCAvZGV2L2xvb3AwIC8nCiAJCQlGU19MT0NBVElPTj0nbW50L2xp dmVjZCcKIAkJZmkKLQkKKwlmaQogIwogIyBFbmQgY2Ryb20gbG9vcHR5cGUgZGV0ZXJtaW5hdGlv biBhbmQgbW91bnRpbmcgaWYgbmVjZXNzYXJ5CiAjCg== 122988 2007-06-24 22:44 0000 problem fixed (boots ok now) genkernel_errata.patch text/plain SW5kZXg6IGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2luaXRyZC5zY3JpcHRzCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K LS0tIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2luaXRyZC5zY3JpcHRzCShyZXZpc2lvbiA1MTgp CisrKyBnZW5rZXJuZWwvdHJ1bmsvZ2VuZXJpYy9pbml0cmQuc2NyaXB0cwkod29ya2luZyBjb3B5 KQpAQCAtMTExLDExICsxMTEsMTAgQEAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Z29vZF9tc2cgIkF0dGVtcHRpbmcgdG8gbW91bnQga2V5IG1lZGlhOi0gJHt4fSIKICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgbW91bnQgLXIgLXQgYXV0byAke3h9ICR7TkVXX1JPT1R9 L21udC9rZXkgXAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgPiAvZGV2L251bGwgMj4mMQotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBmaQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpZiBbICIkPyIgPSAnMCcgXQogICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICB0aGVuCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIyBDaGVjayBmb3IgdGhlIGtleQotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGlmIFsgLWUgJHtORVdfUk9PVH0vbW50L2tleS8ke1NVQkRJUn0v JHtLRVlOQU1FfSBdCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaWYg WyAtZSAke05FV19ST09UfS9tbnQva2V5LyR7S0VZTkFNRX0gXQogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHRoZW4KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEtFWV9ST09UPSIke3h9IgogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgYnJlYWsKQEAgLTQwMSw3ICs0MDAsNyBAQAogICAg ICAgICAjIFVTQiB1c2luZyB0aGUgVVNCIEJsb2NrIERyaXZlcgogICAgICAgICBLRVlERVZTPSIk e0tFWURFVlN9IC9kZXYvdWJkKiAvZGV2L3ViZC8qIgogICAgICAgICAjIGlTZXJpZXMgZGV2aWNl cwotICAgICAgICBLRVlERVZTPSIke0tFWURFVnN9IC9kZXYvaXNlcmllcy92Y2QqIgorICAgICAg ICBLRVlERVZTPSIke0tFWURFVlN9IC9kZXYvaXNlcmllcy92Y2QqIgogCiAgICAgICAgIGZpbmRr ZXltb3VudCAke0tFWURFVlN9CiB9CkluZGV4OiBnZW5rZXJuZWwvdHJ1bmsvZ2VuZXJpYy9saW51 eHJjCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0KLS0tIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2xpbnV4cmMJKHJldmlz aW9uIDUxOCkKKysrIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2xpbnV4cmMJKHdvcmtpbmcgY29w eSkKQEAgLTQ5OSwyOSArNDk5LDMxIEBACiAJaWYgWyAiJHtMT09QX0NSWVBUfSIgIT0gJycgXSAK IAl0aGVuCiAJCWdvb2RfbXNnICdZb3UgYm9vdGVkIGFuIGVuY3J5cHRlZCBsaXZlY2QnCi0JCUtF WU5BTUU9JChoZWFkIC1uIDEgJHtORVdfUk9PVH0vbW50L2Nkcm9tL2xpdmVjZCkKKwkJS0VZTkFN RT0iJChoZWFkIC1uIDEgJHtORVdfUk9PVH0vbW50L2Nkcm9tL2xpdmVjZCkiCiAKIAkJaWYgWyAi JHtLRVlOQU1FfSIgPSAnJyBdCiAJCXRoZW4gCi0JCQlnb29kX21zZyAnSXQncyBub3QgbG9ja2Vk IHdpdGggYSBncGcga2V5LCBhdHRlbXB0aW5nIHRvIGRlY3J5cHQgbWFudWFsbHknCisJCQlnb29k X21zZyAnSXQgaXMgbm90IGxvY2tlZCB3aXRoIGEga2V5LCBhdHRlbXB0aW5nIHRvIGRlY3J5cHQg bWFudWFsbHknCiAJCQlsb3NldHVwIC1lICR7TE9PUF9DUllQVH0gL2Rldi9sb29wMSAke05FV19S T09UfS9tbnQvY2Ryb20vJHtMT09QRVhUfSR7TE9PUH0KIAkJCQogCiAJCWVsc2UgCi0JCQlnb29k X21zZyAnTGl2ZWNkIGxvY2tlZCB3aXRoIGdwZyBrZXknCisJCQlnb29kX21zZyAnTGl2ZWNkIGxv Y2tlZCB3aXRoIGtleScKIAkJCWJvb3RzdHJhcEtleQogCQkJZ29vZF9tc2cgJ0F0dGVtcHRpbmcg dG8gZGVjcnlwdCB3aXRoIGtleScKLQkJCWxvc2V0dXAgLUsgJHtORVdfUk9PVH0vbW50L2tleS8k e1NVQkRJUn0vJHtLRVlOQU1FfSAtZSAke0xPT1BfQ1JZUFR9IC9kZXYvbG9vcDEgXAorCQkJbG9z ZXR1cCAtSyAke05FV19ST09UfS9tbnQva2V5LyR7S0VZTkFNRX0gLWUgJHtMT09QX0NSWVBUfSAv ZGV2L2xvb3AxIFwKIAkJCQkke05FV19ST09UfS9tbnQvY2Ryb20vJHtMT09QRVhUfSR7TE9PUH0K IAkJZmkKIAogCQl0ZXN0X3N1Y2Nlc3MgJ1VuZW5jcnlwdGluZyBsb29wJwogCQkKLQkJY2FzZSAk e0xPT1BUWVBFfSBpbgorCQljYXNlICIke0xPT1BUWVBFfSIgaW4KIAkJCXNxdWFzaGZzKQogCQkJ CU1PVU5UVFlQRT0ic3F1YXNoZnMiCisJCQkJOzsKIAkJCW5vcm1hbCkKIAkJCQlNT1VOVFRZUEU9 ImV4dDIiCisJCQkJOzsKIAkJZXNhYwogCiAJCW1vdW50IC10ICR7TU9VTlRUWVBFfSAtbyBybyAv ZGV2L2xvb3AxICR7TkVXX1JPT1R9L21udC9saXZlY2QgCkBAIC01OTAsNyArNTkyLDcgQEAKIAkJ CXRlc3Rfc3VjY2VzcyAnbW91bnQgL2Rldi9sb29wMCAvJwogCQkJRlNfTE9DQVRJT049J21udC9s aXZlY2QnCiAJCWZpCi0JCisJZmkKICMKICMgRW5kIGNkcm9tIGxvb3B0eXBlIGRldGVybWluYXRp b24gYW5kIG1vdW50aW5nIGlmIG5lY2Vzc2FyeQogIwo= 123127 2007-06-26 16:40 0000 Luks version, without keys. Extra boot option for added security genkernel_luks_cd.patch text/plain SW5kZXg6IGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2luaXRyZC5zY3JpcHRzCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K LS0tIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2luaXRyZC5zY3JpcHRzCShyZXZpc2lvbiA1MTgp CisrKyBnZW5rZXJuZWwvdHJ1bmsvZ2VuZXJpYy9pbml0cmQuc2NyaXB0cwkod29ya2luZyBjb3B5 KQpAQCAtMTA5LDE4ICsxMDksMTggQEAKICAgICAgICAgICAgICAgICAgICAgICAgIGlmIFsgLWIg IiR7eH0iIF0KICAgICAgICAgICAgICAgICAgICAgICAgIHRoZW4KICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgZ29vZF9tc2cgIkF0dGVtcHRpbmcgdG8gbW91bnQga2V5IG1lZGlhOi0g JHt4fSIKLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgbW91bnQgLXIgLXQgYXV0byAk e3h9ICR7TkVXX1JPT1R9L21udC9rZXkgXAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBtb3VudCAtciAtdCBhdXRvICR7eH0gJHtORVdfUk9PVH0vbW50L2tleWRldiBcCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA+IC9kZXYvbnVsbCAyPiYx Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGZpCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGlmIFsgIiQ/IiA9ICcwJyBdCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHRoZW4KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjIENo ZWNrIGZvciB0aGUga2V5Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg aWYgWyAtZSAke05FV19ST09UfS9tbnQva2V5LyR7U1VCRElSfS8ke0tFWU5BTUV9IF0KKyAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpZiBbIC1lICR7TkVXX1JPT1R9L21u dC9rZXlkZXYvJHtTVUJESVJ9LyR7S0VZTkFNRX0gXQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIHRoZW4KLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEtFWV9ST09UPSIke3h9IgorICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgTFVLU19ST09UX0tFWURFVj0iJHt4fSIKKwkJCQkJCXVtb3Vu dCAke05FV19ST09UfS9tbnQva2V5ZGV2CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBicmVhawogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIGVsc2UKLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHVtb3VudCAke05FV19ST09UfS9tbnQva2V5CisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICB1bW91bnQgJHtORVdfUk9PVH0vbW50L2tleWRldgogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGZpCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIGZpCiAgICAgICAgICAgICAgICAgICAgICAgICBmaQpAQCAtNjU4LDYg KzY1OCwxNCBAQAogCQlkbwogCQkJaWYgWyAiJHtMVUtTX0RFVklDRX0iID0gJycgXQogCQkJdGhl bgorCQkJCWlmIFsgJHtMVUtTX1NJTEVOVH0gXQorCQkJCXRoZW4KKwkJCQkJZWNobyAnU3lzdGVt IGJvb3RlZCcKKwkJCQkJcnVuX3NoZWxsCisJCQkJZmkKKworCQkJZWxpZiBbIDEgXQorCQkJdGhl bgogCQkJCSMgTFVLUyBkZXZpY2UgY291bGQgbm90IGJlIG9wZW5lZC4gUHJvbXB0IHVzZXIgZm9y IGRldmljZS4KIAkJCQliYWRfbXNnICJUaGUgTFVLUyAke0xVS1NfTkFNRX0gYmxvY2sgZGV2aWNl IGlzIG5vdCBkZXRlY3RlZC4iCiAJCQkJZWNobyAiICAgUGxlYXNlIHNwZWNpZnkgYSAke0xVS1Nf TkFNRX0gTFVLUyBkZXZpY2UgdG8gb3BlbiwgInEiIHRvIHNraXAsIG9yICJzaGVsbCIgZm9yIGEg c2hlbGwuLi4iCkBAIC02NzcsMTIgKzY4NSwxOCBAQAogCQkJCXNldHVwX21kX2RldmljZSAke0xV S1NfREVWSUNFfQogCQkJCWlmIGNyeXB0c2V0dXAgaXNMdWtzICR7TFVLU19ERVZJQ0V9CiAJCQkJ dGhlbgotCQkJCQlnb29kX21zZyAiT3BlbmluZyBMVUtTIGRldmljZSAke0xVS1NfREVWSUNFfSIK KwkJCQkJaWYgWyAiJHtMVUtTX1NJTEVOVH0iID0gJycgXQorCQkJCQl0aGVuCisJCQkJCQlnb29k X21zZyAiT3BlbmluZyBMVUtTIGRldmljZSAke0xVS1NfREVWSUNFfSIKKwkJCQkJZmkKIAkJCQkJ CiAJCQkJCWNyeXB0c2V0dXAgbHVrc09wZW4gJHtMVUtTX0RFVklDRX0gJHtMVUtTX05BTUV9CiAJ CQkJCWlmIFsgISAiJD8iIC1lcSAnMCcgXQogCQkJCQl0aGVuCiAJCQkJCQliYWRfbXNnICJGYWls ZWQgb3BlbiBMVUtTIGRldmljZSAke0xVS1NfREVWSUNFfSIKKwkJCQkJZWxpZiBbICIke0xVS1Nf U0lMRU5UfSIgXQorCQkJCQl0aGVuCisJCQkJCQlydW5fc2hlbGwKIAkJCQkJZWxzZQogCQkJCQkJ YnJlYWsKIAkJCQkJZmkKSW5kZXg6IGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2xpbnV4cmMKPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQotLS0gZ2Vua2VybmVsL3RydW5rL2dlbmVyaWMvbGludXhyYwkocmV2aXNpb24gNTE4 KQorKysgZ2Vua2VybmVsL3RydW5rL2dlbmVyaWMvbGludXhyYwkod29ya2luZyBjb3B5KQpAQCAt NzIsMTYgKzcyLDEzIEBACiAJCQlDRFJPT1Q9MQogCQkJQ0RST09UX0RFVj1gcGFyc2Vfb3B0ICIk e3h9ImAKIAkJOzsKLQkJIyBTdGFydCBsaXZlY2QgbG9vcCwgbG9vcHR5cGUgb3B0aW9ucyBhbmQg ZW5jcnlwdGlvbgorCQkjIFN0YXJ0IGxpdmVjZCBsb29wLCBsb29wdHlwZSBvcHRpb25zCiAJCWxv b3BcPSopCiAJCQlMT09QPWBwYXJzZV9vcHQgIiR7eH0iYAogCQk7OwogCQlsb29wdHlwZVw9KikK IAkJCUxPT1BUWVBFPWBwYXJzZV9vcHQgIiR7eH0iYAogCQk7OwotCQlsb29wX2NyeXB0XD0qKQot CQkJTE9PUF9DUllQVD1gcGFyc2Vfb3B0ICIke3h9ImAKLQkJOzsKIAkJIyBTdGFydCBEZXZpY2Ug TWFuYWdlciBvcHRpb25zIAogCQlkZXZmcykKIAkJCVVTRV9ERVZGU19OT1JNQUw9MQpAQCAtMTgy LDYgKzE3OSw5IEBACiAJCWNyeXB0X3N3YXBcPSopCiAJCQlMVUtTX1NXQVA9YHBhcnNlX29wdCAi JHt4fSJgCiAJCTs7CisJCWNyeXB0X3NpbGVudFw9KikKKwkJCUxVS1NfU0lMRU5UPWBwYXJzZV9v cHQgIiR7eH0iYAorCQk7OwogCQlyZWFsX3Jvb3RmbGFnc1w9KikKIAkJCVJFQUxfUk9PVEZMQUdT PWBwYXJzZV9vcHQgIiR7eH0iYAogCQk7OwpAQCAtMjM2LDggKzIzNiwxMSBAQAogIyBTY2FuIHZv bHVtZXMKIHN0YXJ0Vm9sdW1lcwogCi0jIEluaXRpYWxpemUgTFVLUyByb290IGRldmljZQotc3Rh cnRMVUtTCisjIEluaXRpYWxpemUgTFVLUyByb290IGRldmljZSBleGNlcHQgZm9yIGxpdmVjZCdz CitpZiBbICIke0NEUk9PVH0iIC1uZSAnMScgXQordGhlbgorCXN0YXJ0TFVLUworZmkKIAogIyBT ZXQgdXAgdW5pb25mcwogbWtkaXIgLXAgJHtORVdfUk9PVH0KQEAgLTI2NCw3ICsyNjcsNyBAQAog CQltb3VudCAtdCB0bXBmcyB0bXBmcyAke05FV19ST09UfQogCWZpCiAJCi0JZm9yIGkgaW4gZGV2 IG1udCBtbnQvY2Ryb20gbW50L2xpdmVjZCBtbnQva2V5IHRtcCB0bXAvLmluaXRyZCBtbnQvZ2Vu dG9vIHN5cworCWZvciBpIGluIGRldiBtbnQgbW50L2Nkcm9tIG1udC9saXZlY2QgbW50L2tleWRl diB0bXAgdG1wLy5pbml0cmQgbW50L2dlbnRvbyBzeXMKIAlkbwogCQlta2RpciAtcCAke05FV19S T09UfS8kaQogCQljaG1vZCA3NTUgJHtORVdfUk9PVH0vJGkKQEAgLTQ5NiwzNyArNDk5LDQxIEBA CiAJCiAKICAgICAgICAgIyBJZiBlbmNyeXB0ZWQsIGZpbmQga2V5IGFuZCBtb3VudCwgb3RoZXJ3 aXNlIG1vdW50IGFzIHVzdWFsCi0JaWYgWyAiJHtMT09QX0NSWVBUfSIgIT0gJycgXSAKKwlpZiBb ICIke0xVS1NfUk9PVH0iICE9ICcnIF0gCiAJdGhlbgotCQlnb29kX21zZyAnWW91IGJvb3RlZCBh biBlbmNyeXB0ZWQgbGl2ZWNkJwotCQlLRVlOQU1FPSQoaGVhZCAtbiAxICR7TkVXX1JPT1R9L21u dC9jZHJvbS9saXZlY2QpCisJCWlmIFsgIiR7TFVLU19TSUxFTlR9IiA9ICcnIF0KKwkJdGhlbgor CQkJZ29vZF9tc2cgJ1lvdSBib290ZWQgYW4gZW5jcnlwdGVkIGxpdmVjZCcKKwkJZmkKIAotCQlp ZiBbICIke0tFWU5BTUV9IiA9ICcnIF0KLQkJdGhlbiAKLQkJCWdvb2RfbXNnICdJdCdzIG5vdCBs b2NrZWQgd2l0aCBhIGdwZyBrZXksIGF0dGVtcHRpbmcgdG8gZGVjcnlwdCBtYW51YWxseScKLQkJ CWxvc2V0dXAgLWUgJHtMT09QX0NSWVBUfSAvZGV2L2xvb3AxICR7TkVXX1JPT1R9L21udC9jZHJv bS8ke0xPT1BFWFR9JHtMT09QfQotCQkJCisJCUxVS1NfUk9PVF9LRVk9JChoZWFkIC1uIDEgJHtO RVdfUk9PVH0vbW50L2Nkcm9tL2xpdmVjZCkKIAotCQllbHNlIAotCQkJZ29vZF9tc2cgJ0xpdmVj ZCBsb2NrZWQgd2l0aCBncGcga2V5JworCQlpZiBbICIke0xVS1NfUk9PVF9LRVl9IiBdCisJCXRo ZW4KIAkJCWJvb3RzdHJhcEtleQotCQkJZ29vZF9tc2cgJ0F0dGVtcHRpbmcgdG8gZGVjcnlwdCB3 aXRoIGtleScKLQkJCWxvc2V0dXAgLUsgJHtORVdfUk9PVH0vbW50L2tleS8ke1NVQkRJUn0vJHtL RVlOQU1FfSAtZSAke0xPT1BfQ1JZUFR9IC9kZXYvbG9vcDEgXAotCQkJCSR7TkVXX1JPT1R9L21u dC9jZHJvbS8ke0xPT1BFWFR9JHtMT09QfQogCQlmaQotCi0JCXRlc3Rfc3VjY2VzcyAnVW5lbmNy eXB0aW5nIGxvb3AnCiAJCQorCQlsb3NldHVwIC9kZXYvbG9vcDEgJHtORVdfUk9PVH0vbW50L2Nk cm9tLyR7TE9PUEVYVH0ke0xPT1B9CisJCQorCQl0ZXN0X3N1Y2Nlc3MgJ1ByZXBhcmluZyBsb29w IGZpbGVzeXN0ZW0nCisJCQorCQlMVUtTX1JPT1Q9Jy9kZXYvbG9vcDEnCisJCQorCQlzdGFydExV S1MKKwkJCiAJCWNhc2UgJHtMT09QVFlQRX0gaW4KLQkJCXNxdWFzaGZzKQotCQkJCU1PVU5UVFlQ RT0ic3F1YXNoZnMiCiAJCQlub3JtYWwpCiAJCQkJTU9VTlRUWVBFPSJleHQyIgotCQllc2FjCisJ CQkJOzsKKwkJCSopCisJCQkJTU9VTlRUWVBFPSIke0xPT1BUWVBFfSIKKwkJCQk7OworCQllc2Fj CQkKIAotCQltb3VudCAtdCAke01PVU5UVFlQRX0gLW8gcm8gL2Rldi9sb29wMSAke05FV19ST09U fS9tbnQvbGl2ZWNkIAotCQkJCQotCQl0ZXN0X3N1Y2Nlc3MgJ01vdW50IGZpbGVzeXN0ZW0sIGNo ZWNraW5nIGtleScJCisKKwkJbW91bnQgLXQgJHtNT1VOVFRZUEV9IC1vIHJvIC9kZXYvbWFwcGVy L3Jvb3QgJHtORVdfUk9PVH0vbW50L2xpdmVjZCAKKwkJCisJCXRlc3Rfc3VjY2VzcyAnTW91bnQg ZmlsZXN5c3RlbScJCiAJCUZTX0xPQ0FUSU9OPSdtbnQvbGl2ZWNkJwogCiAKQEAgLTU5MCw3ICs1 OTcsNyBAQAogCQkJdGVzdF9zdWNjZXNzICdtb3VudCAvZGV2L2xvb3AwIC8nCiAJCQlGU19MT0NB VElPTj0nbW50L2xpdmVjZCcKIAkJZmkKLQkKKwlmaQogIwogIyBFbmQgY2Ryb20gbG9vcHR5cGUg ZGV0ZXJtaW5hdGlvbiBhbmQgbW91bnRpbmcgaWYgbmVjZXNzYXJ5CiAjCg== 123565 2007-07-01 22:56 0000 same as before + improved shutdown, left openluks clean for bug #162962 patch (crypt_silent this after) genkernel_luks_cd2.patch text/plain SW5kZXg6IGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2luaXRyZC5zY3JpcHRzCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K LS0tIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2luaXRyZC5zY3JpcHRzCShyZXZpc2lvbiA1MTgp CisrKyBnZW5rZXJuZWwvdHJ1bmsvZ2VuZXJpYy9pbml0cmQuc2NyaXB0cwkod29ya2luZyBjb3B5 KQpAQCAtMTA4LDI2ICsxMDgsMzMgQEAKICAgICAgICAgICAgICAgICAgICAgICAgICMgQ2hlY2sg Zm9yIGEgYmxvY2sgZGV2aWNlIHRvIG1vdW50CiAgICAgICAgICAgICAgICAgICAgICAgICBpZiBb IC1iICIke3h9IiBdCiAgICAgICAgICAgICAgICAgICAgICAgICB0aGVuCi0gICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGdvb2RfbXNnICJBdHRlbXB0aW5nIHRvIG1vdW50IGtleSBtZWRp YTotICR7eH0iCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIG1vdW50IC1yIC10IGF1 dG8gJHt4fSAke05FV19ST09UfS9tbnQva2V5IFwKKwkJCQlpZiBbICR7Y3J5cHRfc2lsZW50fSA9 ICcnIF0KKwkJCQl0aGVuCisJICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBnb29kX21z ZyAiQXR0ZW1wdGluZyB0byBtb3VudCBrZXkgbWVkaWE6LSAke3h9IgorCQkJCWZpCisKKyAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgbW91bnQgLXIgLXQgYXV0byAke3h9ICR7TkVXX1JP T1R9L21udC9rZXlkZXYgXAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgPiAvZGV2L251bGwgMj4mMQotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBmaQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBpZiBbICIkPyIgPSAnMCcgXQog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB0aGVuCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIyBDaGVjayBmb3IgdGhlIGtleQotICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIGlmIFsgLWUgJHtORVdfUk9PVH0vbW50L2tleS8ke1NV QkRJUn0vJHtLRVlOQU1FfSBdCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgaWYgWyAtZSAke05FV19ST09UfS9tbnQva2V5ZGV2LyR7TFVLU19ST09UX0tFWX0gXQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHRoZW4KLSAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEtFWV9ST09UPSIke3h9IgorICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTFVLU19ST09UX0tFWURF Vj0iJHt4fSIKKwkJCQkJCXVtb3VudCAke05FV19ST09UfS9tbnQva2V5ZGV2CiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBicmVhawogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIGVsc2UKLSAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHVtb3VudCAke05FV19ST09UfS9tbnQva2V5CisgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB1bW91bnQgJHtORVdf Uk9PVH0vbW50L2tleWRldgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IGZpCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGZpCiAgICAgICAgICAgICAgICAg ICAgICAgICBmaQogICAgICAgICAgICAgICAgIGRvbmUKLSAgICAgICAgICAgICAgICBpZiBbICIk e0tFWV9ST09UfSIgIT0gJycgXQorICAgICAgICAgICAgICAgIGlmIFsgIiR7TFVLU19ST09UX0tF WURFVn0iICE9ICcnIF0KICAgICAgICAgICAgICAgICB0aGVuCi0gICAgICAgICAgICAgICAgICAg ICAgICBnb29kX21zZyAiS2V5IG1lZGlhIGZvdW5kIG9uICR7eH0iCisJCQlpZiBbICR7Y3J5cHRf c2lsZW50fSA9ICcnIF0KKwkJCXRoZW4KKwkgICAgICAgICAgICAgICAgICAgICAgICBnb29kX21z ZyAiS2V5IG1lZGlhIGZvdW5kIG9uICR7eH0iCisJCQlmaQogICAgICAgICAgICAgICAgIGZpCiAg ICAgICAgIGZpCiB9CkluZGV4OiBnZW5rZXJuZWwvdHJ1bmsvZ2VuZXJpYy9saW51eHJjCj09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0KLS0tIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2xpbnV4cmMJKHJldmlzaW9uIDUxOCkK KysrIGdlbmtlcm5lbC90cnVuay9nZW5lcmljL2xpbnV4cmMJKHdvcmtpbmcgY29weSkKQEAgLTcy LDE2ICs3MiwxMyBAQAogCQkJQ0RST09UPTEKIAkJCUNEUk9PVF9ERVY9YHBhcnNlX29wdCAiJHt4 fSJgCiAJCTs7Ci0JCSMgU3RhcnQgbGl2ZWNkIGxvb3AsIGxvb3B0eXBlIG9wdGlvbnMgYW5kIGVu Y3J5cHRpb24KKwkJIyBTdGFydCBsaXZlY2QgbG9vcCwgbG9vcHR5cGUgb3B0aW9ucwogCQlsb29w XD0qKQogCQkJTE9PUD1gcGFyc2Vfb3B0ICIke3h9ImAKIAkJOzsKIAkJbG9vcHR5cGVcPSopCiAJ CQlMT09QVFlQRT1gcGFyc2Vfb3B0ICIke3h9ImAKIAkJOzsKLQkJbG9vcF9jcnlwdFw9KikKLQkJ CUxPT1BfQ1JZUFQ9YHBhcnNlX29wdCAiJHt4fSJgCi0JCTs7CiAJCSMgU3RhcnQgRGV2aWNlIE1h bmFnZXIgb3B0aW9ucyAKIAkJZGV2ZnMpCiAJCQlVU0VfREVWRlNfTk9STUFMPTEKQEAgLTE4Miw2 ICsxNzksOSBAQAogCQljcnlwdF9zd2FwXD0qKQogCQkJTFVLU19TV0FQPWBwYXJzZV9vcHQgIiR7 eH0iYAogCQk7OworCQljcnlwdF9zaWxlbnRcPSopCisJCQlMVUtTX1NJTEVOVD1gcGFyc2Vfb3B0 ICIke3h9ImAKKwkJOzsKIAkJcmVhbF9yb290ZmxhZ3NcPSopCiAJCQlSRUFMX1JPT1RGTEFHUz1g cGFyc2Vfb3B0ICIke3h9ImAKIAkJOzsKQEAgLTIzNiw4ICsyMzYsMTEgQEAKICMgU2NhbiB2b2x1 bWVzCiBzdGFydFZvbHVtZXMKIAotIyBJbml0aWFsaXplIExVS1Mgcm9vdCBkZXZpY2UKLXN0YXJ0 TFVLUworIyBJbml0aWFsaXplIExVS1Mgcm9vdCBkZXZpY2UgZXhjZXB0IGZvciBsaXZlY2Qncwor aWYgWyAiJHtDRFJPT1R9IiAtbmUgJzEnIF0KK3RoZW4KKwlzdGFydExVS1MKK2ZpCiAKICMgU2V0 IHVwIHVuaW9uZnMKIG1rZGlyIC1wICR7TkVXX1JPT1R9CkBAIC0yNjQsNyArMjY3LDcgQEAKIAkJ bW91bnQgLXQgdG1wZnMgdG1wZnMgJHtORVdfUk9PVH0KIAlmaQogCQotCWZvciBpIGluIGRldiBt bnQgbW50L2Nkcm9tIG1udC9saXZlY2QgbW50L2tleSB0bXAgdG1wLy5pbml0cmQgbW50L2dlbnRv byBzeXMKKwlmb3IgaSBpbiBkZXYgbW50IG1udC9jZHJvbSBtbnQvbGl2ZWNkIG1udC9rZXlkZXYg dG1wIHRtcC8uaW5pdHJkIG1udC9nZW50b28gc3lzCiAJZG8KIAkJbWtkaXIgLXAgJHtORVdfUk9P VH0vJGkKIAkJY2htb2QgNzU1ICR7TkVXX1JPT1R9LyRpCkBAIC00OTYsMzcgKzQ5OSw0MSBAQAog CQogCiAgICAgICAgICMgSWYgZW5jcnlwdGVkLCBmaW5kIGtleSBhbmQgbW91bnQsIG90aGVyd2lz ZSBtb3VudCBhcyB1c3VhbAotCWlmIFsgIiR7TE9PUF9DUllQVH0iICE9ICcnIF0gCisJaWYgWyAi JHtMVUtTX1JPT1R9IiAhPSAnJyBdIAogCXRoZW4KLQkJZ29vZF9tc2cgJ1lvdSBib290ZWQgYW4g ZW5jcnlwdGVkIGxpdmVjZCcKLQkJS0VZTkFNRT0kKGhlYWQgLW4gMSAke05FV19ST09UfS9tbnQv Y2Ryb20vbGl2ZWNkKQorCQlpZiBbICIke0xVS1NfU0lMRU5UfSIgPSAnJyBdCisJCXRoZW4KKwkJ CWdvb2RfbXNnICdZb3UgYm9vdGVkIGFuIGVuY3J5cHRlZCBsaXZlY2QnCisJCWZpCiAKLQkJaWYg WyAiJHtLRVlOQU1FfSIgPSAnJyBdCi0JCXRoZW4gCi0JCQlnb29kX21zZyAnSXQncyBub3QgbG9j a2VkIHdpdGggYSBncGcga2V5LCBhdHRlbXB0aW5nIHRvIGRlY3J5cHQgbWFudWFsbHknCi0JCQls b3NldHVwIC1lICR7TE9PUF9DUllQVH0gL2Rldi9sb29wMSAke05FV19ST09UfS9tbnQvY2Ryb20v JHtMT09QRVhUfSR7TE9PUH0KLQkJCQorCQlMVUtTX1JPT1RfS0VZPSQoaGVhZCAtbiAxICR7TkVX X1JPT1R9L21udC9jZHJvbS9saXZlY2QpCiAKLQkJZWxzZSAKLQkJCWdvb2RfbXNnICdMaXZlY2Qg bG9ja2VkIHdpdGggZ3BnIGtleScKKwkJaWYgWyAiJHtMVUtTX1JPT1RfS0VZfSIgXQorCQl0aGVu CiAJCQlib290c3RyYXBLZXkKLQkJCWdvb2RfbXNnICdBdHRlbXB0aW5nIHRvIGRlY3J5cHQgd2l0 aCBrZXknCi0JCQlsb3NldHVwIC1LICR7TkVXX1JPT1R9L21udC9rZXkvJHtTVUJESVJ9LyR7S0VZ TkFNRX0gLWUgJHtMT09QX0NSWVBUfSAvZGV2L2xvb3AxIFwKLQkJCQkke05FV19ST09UfS9tbnQv Y2Ryb20vJHtMT09QRVhUfSR7TE9PUH0KIAkJZmkKLQotCQl0ZXN0X3N1Y2Nlc3MgJ1VuZW5jcnlw dGluZyBsb29wJwogCQkKKwkJbG9zZXR1cCAvZGV2L2xvb3AwICR7TkVXX1JPT1R9L21udC9jZHJv bS8ke0xPT1BFWFR9JHtMT09QfQorCQkKKwkJdGVzdF9zdWNjZXNzICdQcmVwYXJpbmcgbG9vcCBm aWxlc3lzdGVtJworCQkKKwkJTFVLU19ST09UPScvZGV2L2xvb3AwJworCQkKKwkJc3RhcnRMVUtT CisJCQogCQljYXNlICR7TE9PUFRZUEV9IGluCi0JCQlzcXVhc2hmcykKLQkJCQlNT1VOVFRZUEU9 InNxdWFzaGZzIgogCQkJbm9ybWFsKQogCQkJCU1PVU5UVFlQRT0iZXh0MiIKLQkJZXNhYworCQkJ CTs7CisJCQkqKQorCQkJCU1PVU5UVFlQRT0iJHtMT09QVFlQRX0iCisJCQkJOzsKKwkJZXNhYwkJ CiAKLQkJbW91bnQgLXQgJHtNT1VOVFRZUEV9IC1vIHJvIC9kZXYvbG9vcDEgJHtORVdfUk9PVH0v bW50L2xpdmVjZCAKLQkJCQkKLQkJdGVzdF9zdWNjZXNzICdNb3VudCBmaWxlc3lzdGVtLCBjaGVj a2luZyBrZXknCQorCisJCW1vdW50IC10ICR7TU9VTlRUWVBFfSAtbyBybyAvZGV2L21hcHBlci9y b290ICR7TkVXX1JPT1R9L21udC9saXZlY2QgCisJCQorCQl0ZXN0X3N1Y2Nlc3MgJ01vdW50IGZp bGVzeXN0ZW0nCQogCQlGU19MT0NBVElPTj0nbW50L2xpdmVjZCcKIAogCkBAIC01OTAsNyArNTk3 LDcgQEAKIAkJCXRlc3Rfc3VjY2VzcyAnbW91bnQgL2Rldi9sb29wMCAvJwogCQkJRlNfTE9DQVRJ T049J21udC9saXZlY2QnCiAJCWZpCi0JCisJZmkKICMKICMgRW5kIGNkcm9tIGxvb3B0eXBlIGRl dGVybWluYXRpb24gYW5kIG1vdW50aW5nIGlmIG5lY2Vzc2FyeQogIwo=