mirror of
https://github.com/xcat2/confluent.git
synced 2025-08-24 20:20:36 +00:00
329f2b4485fc26005525bd11616cc95d1641e0d3
Provide mechanism for administrator to place a custom key for potential interactive recovery into /var/lib/confluent/private/os/<profile>/pending/luks.key If not provided, generate a unique one for each install. Either way, persist the key in /etc/confluent/luks.key, to facilitate later resealing if the user wants (clevis nor systemd prior to 256 supports unlock via TPM2, so keyfile is required for now). Migrating to otherwise escrowed passphrases and/or sealing to specific TPMs will be left to operators and/or third parties.
Description
xCAT confluent - replacement of conserver and eventually xcatd
Languages
Python
79.4%
Shell
16.5%
C
3.3%
Go
0.4%
Perl
0.3%