projects / systemd / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c5a421b) | patch
Add support for systemd-tpm2 libcryptsetup plugin.
authorOndrej Kozina <okozina@redhat.com>
Tue, 16 Mar 2021 19:13:28 +0000 (20:13 +0100)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Mon, 26 Jul 2021 13:15:16 +0000 (15:15 +0200)
commitd1ae38d85ae458ba8126465d25789e2721a75dba
tree6a94b4a55181e4577d1c0781a7a5c0342d5296d8tree | snapshot
parentc5a421b3b9d94b3a6736ac61aa5b085e66f2f76acommit | diff
Add support for systemd-tpm2 libcryptsetup plugin.

Add support for systemd-tpm2 based LUKS2 device activation
via libcryptsetup plugin. This make the feature (tpm2 sealed
LUKS2 keyslot passphrase) usable from both systemd utilities
and cryptsetup cli.

The feature is configured via -Dlibcryptsetup-plugins combo
with default value set to 'auto'. It get's enabled automatically
when cryptsetup 2.4.0 or later is installed in build system.
12 files changed:
meson.build diff | blob | history
meson_options.txt diff | blob | history
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-systemd-tpm2.c [new file with mode: 0644] blob
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-util.c [new file with mode: 0644] blob
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-util.h [new file with mode: 0644] blob
src/cryptsetup/cryptsetup-tokens/cryptsetup-token.h [new file with mode: 0644] blob
src/cryptsetup/cryptsetup-tokens/cryptsetup-token.sym [new file with mode: 0644] blob
src/cryptsetup/cryptsetup-tokens/luks2-tpm2.c [new file with mode: 0644] blob
src/cryptsetup/cryptsetup-tokens/luks2-tpm2.h [new file with mode: 0644] blob
src/cryptsetup/cryptsetup-tokens/meson.build [new file with mode: 0644] blob
src/cryptsetup/cryptsetup.c diff | blob | history
src/shared/tpm2-util.h diff | blob | history
https://github.com/systemd/systemd.git