mirror of
https://git.proxmox.com/git/mirror_zfs.git
synced 2024-12-27 11:29:36 +03:00
1cc635a2dd
This commit add a new feature for Debian-based distributions to unlock encrypted root partition over SSH. This feature is very handy on headless NAS or VPS cloud servers. To use this feature, you will need to install the dropbear-initramfs package. Reviewed-By: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed-By: Tom Caputi <tcaputi@datto.com> Signed-off-by: Andrey Prokopenko <job@terem.fr> Signed-off-by: Richard Laager <rlaager@wiktel.com> Closes #10027
43 lines
1.4 KiB
Bash
Executable File
43 lines
1.4 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
set -eu
|
|
if [ ! -e /run/zfs_fs_name ]; then
|
|
echo "Wait for the root pool to be imported or press Ctrl-C to exit."
|
|
fi
|
|
while [ ! -e /run/zfs_fs_name ]; do
|
|
if [ -e /run/zfs_unlock_complete ]; then
|
|
exit 0
|
|
fi
|
|
sleep 0.5
|
|
done
|
|
echo
|
|
echo "Unlocking encrypted ZFS filesystems..."
|
|
echo "Enter the password or press Ctrl-C to exit."
|
|
echo
|
|
zfs_fs_name=""
|
|
if [ ! -e /run/zfs_unlock_complete_notify ]; then
|
|
mkfifo /run/zfs_unlock_complete_notify
|
|
fi
|
|
while [ ! -e /run/zfs_unlock_complete ]; do
|
|
zfs_fs_name=$(cat /run/zfs_fs_name)
|
|
zfs_console_askpwd_cmd=$(cat /run/zfs_console_askpwd_cmd)
|
|
systemd-ask-password "Encrypted ZFS password for ${zfs_fs_name}:" | \
|
|
/sbin/zfs load-key "$zfs_fs_name" || true
|
|
if [ "$(/sbin/zfs get -H -ovalue keystatus "$zfs_fs_name" 2> /dev/null)" = "available" ]; then
|
|
echo "Password for $zfs_fs_name accepted."
|
|
zfs_console_askpwd_pid=$(ps a -o pid= -o args | grep -v grep | grep "$zfs_console_askpwd_cmd" | cut -d ' ' -f3 | sort -n | head -n1)
|
|
if [ -n "$zfs_console_askpwd_pid" ]; then
|
|
kill "$zfs_console_askpwd_pid"
|
|
fi
|
|
# Wait for another filesystem to unlock.
|
|
while [ "$(cat /run/zfs_fs_name)" = "$zfs_fs_name" ] && [ ! -e /run/zfs_unlock_complete ]; do
|
|
sleep 0.5
|
|
done
|
|
else
|
|
echo "Wrong password. Try again."
|
|
fi
|
|
done
|
|
echo "Unlocking complete. Resuming boot sequence..."
|
|
echo "Please reconnect in a while."
|
|
echo "ok" > /run/zfs_unlock_complete_notify
|