[patch] Patch for dm-crypt-start.sh to add master capability. (against sys-fs/cryptsetup-luks)

dm-crypt-start.patch (text/plain), 2.17 KB, created by Joshua (RETIRED) on 2005-11-20 22:36:30 UTC

--- dm-crypt-start.sh.orig	2005-11-21 14:29:04.997476000 +0800
+++ dm-crypt-start.sh	2005-11-21 14:28:50.372476000 +0800
@@ -34,18 +34,23 @@
 
 	splash svc_input_begin checkfs
 	ebegin "dm-crypt map ${target}"
-	if [[ -z ${key} ]] && [[ -z ${type} ]] ; then
+	if [[ -z ${key} ]] && [[ -z ${master} ]] && [[ -z ${type} ]] ; then
 		/bin/cryptsetup ${options} create ${target} ${source} >/dev/console </dev/console
 		ret=$?
 		eend ${ret} "failure running cryptsetup"
 	elif [[ -n ${type} ]] ; then
 		einfo "/bin/cryptsetup ${options} luksOpen ${source} ${target}" 
-		/bin/cryptsetup ${options} luksOpen ${source} ${target} >/dev/console </dev/console
+		if [[ -z ${master_key} ]] ; then
+		    /bin/cryptsetup ${options} luksOpen ${source} ${target} >/dev/console </dev/console
 		#/bin/cryptsetup ${options} luksOpen ${source} ${target} 
+		else
+		    echo ${master} | /bin/cryptsetup ${options} luksOpen ${source} ${target} >/dev/console
+		fi
 		ret=$?
 		eend ${ret} "failure running cryptsetup-luks"
 	elif [[ -n ${key} ]] ; then
 		if type -p gpg >/dev/null ; then
+		    if [[ -z ${master} ]] ; then
 			ret=1
 			while [[ ${ret} -gt 0 ]] ; do
 				keystring=$(gpg ${gpg_options} ${key} 2>/dev/null </dev/console)
@@ -57,6 +62,11 @@
 				fi
 			done
 			eend ${ret}
+		    else
+			keystring=$(echo ${master} | gpg -q -d ${gpg_options} --passphrase-fd 0 ${key} 2>/dev/null)
+			echo ${keystring} | /bin/cryptsetup ${options} create ${target} ${source}
+			ret=0
+		    fi
 		else
 			einfo "You have to install app-crypt/gnupg first"
 		fi
@@ -132,7 +142,25 @@
 					continue
 				fi
 				;;
-
+		        master_key=*)
+			        if [[ "${myservice}" = "checkfs" ]] ; then
+				    if type -p gpg >/dev/null ; then
+					ret=1
+					while [[ ${ret} -gt 0 ]] ; do
+			        # Get the master passphrase. 
+					    ret=0
+					    eval "${mountline}"
+					    master=$(gpg -d -q ${gpg_options} ${master_key}  2>/dev/null </dev/console)
+					    if [[ -z ${master} ]] ; then
+						ret=5
+					    fi
+					done
+					eend ${ret}
+				    else
+					einfo "You have to install app-crypt/gpg first"
+				    fi
+				fi
+				;;
 			*)
 				ewarn "Skipping invalid line in /etc/conf.d/cryptfs: ${mountline}"
 				;;