~dbungert/curtin:test-use-zfs-keystore

Last commit made on 2024-02-28
Get this branch:
git clone -b test-use-zfs-keystore https://git.launchpad.net/~dbungert/curtin
Only Dan Bungert can upload to this branch. If you are Dan Bungert please log in for upload directions.

Branch merges

Branch information

Name:
test-use-zfs-keystore
Repository:
lp:~dbungert/curtin

Recent commits

bd6c732... by Dan Bungert

zpool: create keystore encrypted setups

Add support for the 'luks_keystore' style encrypted ZFS install. Native
ZFS encryption is supported by a small dm_crypt dataset containing the
real key. This is a functional transcription of the way that Ubiquity
has implemented encrypted guided ZFS.

(cherry picked from commit 5bf15d6373def082104d64a352c53ed079b537dd)

5018e9b... by Dan Bungert

dm_crypt: tests related to keyfile removal

(cherry picked from commit 0bbd69f9725db580c666802a1c60683d11371ba0)

100fd29... by Dan Bungert

dm_crypt: clearer name for keyfile removal

(cherry picked from commit c89bbea036239d0e58b4238f94fe9ba94273c929)

9019ff0... by Dan Bungert

dm_crypt: create and use cryptoswap as PLAIN

Previously, cryptoswap was acting strangely, in that at install time it
was considered to be a LUKS2 device and durign actual system use it
would be considered a PLAIN device, in the cryptsetup(8) meanings of
these terms.

This caused problems when attempting to reference the device, as we
would do get_volume_spec(), the returned /dev/disk/by-id/dm-uuid-...
value would be wrong - it would change from dm-uuid-CRYPT-LUKS2-... to
dm-uuid-CRYPT-PLAIN-...

As the real runtime behavior is to be a PLAIN device for cryptoswap,
stop creating it as a LUKS2 device and just use it as a PLAIN device,
which doesn't involve a "create" step at all, you just open it as PLAIN
directly.

(cherry picked from commit a633831f2f2151249c1ffa1c02c0963b3777a45c)

b49fc6f... by Dan Bungert

dm_crypt: split create and open operations

(cherry picked from commit 51cea6891a8d15a3847fdc1391986bc6eca0f5b4)

b3560c2... by Dan Bungert

block_meta: improve get_volume_uuid

blkid can return 3 different types of UUIDs, and they aren't
interchangable. Clarify which one we're using.

Also, leverage the existing blkid() wrapper to do so.

(cherry picked from commit 1e8b95bece72c39bffd29d061c55593cd6bb4920)

a85f7d6... by Alexsander de Souza

raise exception on bcache validation errors

returning the exception is probably a typo

cbe2186... by Skia

pycodestyle: make use of isinstance() instead of type()

Should fix curtin-style-tip job.

c3f04cb... by Skia

Disable a flaky test to reach forever green CI.

237053d... by Olivier Gayot

Merge branch 'nvme-o-tcp-storageconfig'

https://code.launchpad.net/~ogayot/curtin/+git/curtin/+merge/458446