summarylogtreecommitdiffstats
path: root/zfs-utils.initcpio.zfsencryptssh.install
diff options
context:
space:
mode:
authorJan Houben2018-11-10 19:44:47 -0500
committerJan Houben2018-11-10 19:44:47 -0500
commitf85d859de36052f8a85a4e57f979e4cd1537996b (patch)
treec668a04040a171abf979c20a93287ab060dff552 /zfs-utils.initcpio.zfsencryptssh.install
parent893f94629951734fb5e4e5e11e183045998c11f8 (diff)
downloadaur-f85d859de36052f8a85a4e57f979e4cd1537996b.tar.gz
Import from zfs-utils-common-git
Diffstat (limited to 'zfs-utils.initcpio.zfsencryptssh.install')
-rw-r--r--zfs-utils.initcpio.zfsencryptssh.install39
1 files changed, 39 insertions, 0 deletions
diff --git a/zfs-utils.initcpio.zfsencryptssh.install b/zfs-utils.initcpio.zfsencryptssh.install
new file mode 100644
index 00000000000..e0ef04beabf
--- /dev/null
+++ b/zfs-utils.initcpio.zfsencryptssh.install
@@ -0,0 +1,39 @@
+#!/bin/bash
+
+make_etc_passwd() {
+ echo 'root:x:0:0:root:/root:/bin/zfsdecrypt_shell' > "${BUILDROOT}"/etc/passwd
+ echo '/bin/zfsdecrypt_shell' > "${BUILDROOT}"/etc/shells
+}
+
+make_zfsdecrypt_shell() {
+ decrypt_shell='#!/bin/sh
+if [ -f "/.encryptionroot" ]; then
+ # source zfs hook functions
+ . /hooks/zfs
+ # decrypt bootfs
+ zfs_decrypt_fs "$(cat /.encryptionroot)"
+ # kill pending decryption attempt to allow the boot process to continue
+ killall zfs
+else
+ echo "ZFS is not ready yet. Please wait!"
+fi'
+ printf '%s' "$decrypt_shell" > "${BUILDROOT}"/bin/zfsdecrypt_shell
+ chmod a+x "${BUILDROOT}"/bin/zfsdecrypt_shell
+}
+
+build ()
+{
+ make_etc_passwd
+ make_zfsdecrypt_shell
+}
+
+help ()
+{
+ cat<<HELPEOF
+This hook is meant to be used in conjunction with mkinitcpio-dropbear,
+mkinitcpio-netconf and/ormkinitcpio-ppp. This will provide a way to unlock
+your encrypted ZFS root filesystem remotely.
+HELPEOF
+}
+
+# vim: set ts=4 sw=4 ft=sh et: