Compare commits
3 commits
Author | SHA1 | Date | |
---|---|---|---|
d415066add | |||
fb6d31b727 | |||
cc1a1b7065 |
3 changed files with 5 additions and 5 deletions
|
@ -1,10 +1,10 @@
|
||||||
# Zlevis
|
# zlevis
|
||||||
|
|
||||||
A minimal fork of [Clevis](https://github.com/latchset/clevis), rewritten in POSIX shell to accommodate automatic decryption of a ZFS root pool with TPM2.
|
A minimal fork of [Clevis](https://github.com/latchset/clevis), rewritten in POSIX shell to accommodate automatic decryption of a ZFS root pool with TPM2.
|
||||||
|
|
||||||
## Installation
|
## Installation
|
||||||
|
|
||||||
Zlevis can be installed with `meson`, after cloning the repository, setup the build directory
|
`zlevis` can be installed with `meson`, after cloning the repository, setup the build directory:
|
||||||
|
|
||||||
```
|
```
|
||||||
$ meson setup builddir
|
$ meson setup builddir
|
||||||
|
@ -14,7 +14,7 @@ $ meson setup builddir
|
||||||
|
|
||||||
> Using the `--reconfigure` flag will reconfigure the build directory.
|
> Using the `--reconfigure` flag will reconfigure the build directory.
|
||||||
|
|
||||||
Installation of the zlevis scripts is now performed with
|
Installation of the `zlevis` scripts is now performed with:
|
||||||
|
|
||||||
```
|
```
|
||||||
# meson install -C builddir
|
# meson install -C builddir
|
||||||
|
|
|
@ -1,5 +1,5 @@
|
||||||
# Project definition
|
# Project definition
|
||||||
project('zlevis', license: 'GPL3', version: '1')
|
project('zlevis', license: 'GPL3')
|
||||||
|
|
||||||
# Define bindir
|
# Define bindir
|
||||||
bindir = join_paths(get_option('prefix'), get_option('bindir'))
|
bindir = join_paths(get_option('prefix'), get_option('bindir'))
|
||||||
|
|
|
@ -186,7 +186,7 @@ trap 'rm -f "$tmp_primary_context" "$tmp_pcr_policy" "$tmp_jwk_pub" "$tmp_jwk_pr
|
||||||
|
|
||||||
# Create the TPM2 object for the JWK
|
# Create the TPM2 object for the JWK
|
||||||
case "$tpm2tools_version" in
|
case "$tpm2tools_version" in
|
||||||
4|5) printf "%s" "$jwk" | tpm2_create -Q -g "$hash" -C "$tmp_primary_context" -u "$tmp_jwk_pub" -r "$tmp_jwk_priv" -a "$obj_attr" -L "${policy_options[@]}" -i- || fail=$?;;
|
4|5) printf "%s" "$jwk" | tpm2_create -Q -g "$hash" -C "$tmp_primary_context" -u "$tmp_jwk_pub" -r "$tmp_jwk_priv" -a "$obj_attr" -L "$policy_options" -i- || fail=$?;;
|
||||||
*) fail=1;;
|
*) fail=1;;
|
||||||
esac
|
esac
|
||||||
if [ -n "$fail" ]; then
|
if [ -n "$fail" ]; then
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue