2
0
mirror of https://github.com/xcat2/confluent.git synced 2025-08-24 20:20:36 +00:00
Jarrod Johnson 329f2b4485 Amend cryptboot implementation for Ubuntu 22/24, EL8/EL9
Provide mechanism for administrator to place a custom
key for potential interactive recovery into
/var/lib/confluent/private/os/<profile>/pending/luks.key

If not provided, generate a unique one for each install.

Either way, persist the key in /etc/confluent/luks.key, to
facilitate later resealing if the user wants (clevis nor systemd
prior to 256 supports unlock via TPM2, so keyfile is required
for now).

Migrating to otherwise escrowed passphrases and/or sealing to
specific TPMs will be left to operators and/or third parties.
2024-07-29 10:17:14 -04:00
2024-07-15 09:22:59 -04:00
2024-05-23 15:15:37 -04:00
2021-01-21 11:52:22 -05:00
Description
xCAT confluent - replacement of conserver and eventually xcatd
11 MiB
Languages
Python 79.4%
Shell 16.5%
C 3.3%
Go 0.4%
Perl 0.3%