d108ec594a
- Introduces a new package, grub2-x86_64-efi-bls, which includes a straightforward grubbls.efi file. This file can be copied to the EFI System Partition (ESP) along with boot fragments in the Boot Loader Specification (BLS) format * 0001-Streamline-BLS-and-improve-PCR-stability.patch - Fix crash in bli module (bsc#1226497) * 0001-bli-Fix-crash-in-get_part_uuid.patch - Rework package dependencies: grub2-common now includes common userland utilities and is required by grub2 platform packages. grub2 is now a meta package that pulls in the default platform package. OBS-URL: https://build.opensuse.org/request/show/1196023 OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=512
88 lines
2.5 KiB
Diff
88 lines
2.5 KiB
Diff
From 2d3130c289b293269dcf558a26674f83f77729a6 Mon Sep 17 00:00:00 2001
|
|
From: Michael Chang <mchang@suse.com>
|
|
Date: Tue, 14 Jun 2022 17:10:01 +0800
|
|
Subject: [PATCH 10/10] templates: import /etc/crypttab to grub.cfg
|
|
|
|
The /etc/crypptab is used to setup location of encryption key files during
|
|
boot, among other things. It is useful to make use the information by grub to
|
|
determine where keys are being looked up.
|
|
|
|
This script can be used to import relevant /etc/crypptab entry to grub.cfg.
|
|
|
|
Signed-off-by: Michael Chang <mchang@suse.com>
|
|
---
|
|
Makefile.util.def | 7 ++++++
|
|
util/grub.d/05_crypttab.in | 50 +++++++++++++++++++++++++++++++++++++++++++++
|
|
2 files changed, 57 insertions(+)
|
|
create mode 100644 util/grub.d/05_crypttab.in
|
|
|
|
--- a/Makefile.util.def
|
|
+++ b/Makefile.util.def
|
|
@@ -483,6 +483,13 @@
|
|
};
|
|
|
|
script = {
|
|
+ name = '05_crypttab';
|
|
+ common = util/grub.d/05_crypttab.in;
|
|
+ installdir = grubconf;
|
|
+ condition = COND_HOST_LINUX;
|
|
+};
|
|
+
|
|
+script = {
|
|
name = '10_windows';
|
|
common = util/grub.d/10_windows.in;
|
|
installdir = grubconf;
|
|
--- /dev/null
|
|
+++ b/util/grub.d/05_crypttab.in
|
|
@@ -0,0 +1,50 @@
|
|
+#! /bin/sh
|
|
+set -e
|
|
+
|
|
+# grub-mkconfig helper script.
|
|
+# Copyright (C) 2022 Free Software Foundation, Inc.
|
|
+#
|
|
+# GRUB is free software: you can redistribute it and/or modify
|
|
+# it under the terms of the GNU General Public License as published by
|
|
+# the Free Software Foundation, either version 3 of the License, or
|
|
+# (at your option) any later version.
|
|
+#
|
|
+# GRUB is distributed in the hope that it will be useful,
|
|
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
+# GNU General Public License for more details.
|
|
+#
|
|
+# You should have received a copy of the GNU General Public License
|
|
+# along with GRUB. If not, see <http://www.gnu.org/licenses/>.
|
|
+
|
|
+prefix="@prefix@"
|
|
+exec_prefix="@exec_prefix@"
|
|
+datarootdir="@datarootdir@"
|
|
+
|
|
+export TEXTDOMAIN=@PACKAGE@
|
|
+export TEXTDOMAINDIR="@localedir@"
|
|
+
|
|
+. "$pkgdatadir/grub-mkconfig_lib"
|
|
+
|
|
+CRYPTTAB=/etc/crypttab
|
|
+
|
|
+if [ -r "$CRYPTTAB" ]; then
|
|
+ awk '
|
|
+ /^\s*#/ || $3 ~ /(^\/dev\/|^\/proc\/|^\/sys\/|:)/ { next }
|
|
+ { key[0] = $3 }
|
|
+ $3 ~ /(^$|none|-)/ {
|
|
+ key[0] = "/etc/cryptsetup-keys.d/" $1 ".key"
|
|
+ key[1] = "/run/cryptsetup-keys.d/" $1 ".key"
|
|
+ }
|
|
+ {
|
|
+ for (d in key)
|
|
+ if (system("test -f " key[d]) == 0)
|
|
+ next
|
|
+ }
|
|
+ /UUID=/ {
|
|
+ sub(/UUID=/,"",$2);
|
|
+ gsub(/-/,"",$2);
|
|
+ printf("crypttab_entry %s %s %s\n",$1,$2,$3)
|
|
+ }
|
|
+ ' "$CRYPTTAB"
|
|
+fi
|