ampel/zlevis
2
1
Fork 0
Code Issues Pull requests Releases 7 Wiki Activity

Compare commits

base: ampel:d415066add315110214e73063cf7c5f64082648e
Branches Tags
ampel:master
ampel:2.2
ampel:2.1
ampel:2.0
ampel:1.3
ampel:1.2
ampel:1.1
ampel:1.0
..
compare: ampel:4a3b0583c4e1756ea0d732c84bedde90f4ee5676
Branches Tags
ampel:master
ampel:2.2
ampel:2.1
ampel:2.0
ampel:1.3
ampel:1.2
ampel:1.1
ampel:1.0

No commits in common. "d415066add315110214e73063cf7c5f64082648e" and "4a3b0583c4e1756ea0d732c84bedde90f4ee5676" have entirely different histories.
d415066add ... 4a3b0583c4

3 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

6
README.md
View file

@ -1,10 +1,10 @@
# zlevis # Zlevis
A minimal fork of [Clevis](https://github.com/latchset/clevis), rewritten in POSIX shell to accommodate automatic decryption of a ZFS root pool with TPM2. A minimal fork of [Clevis](https://github.com/latchset/clevis), rewritten in POSIX shell to accommodate automatic decryption of a ZFS root pool with TPM2.
## Installation ## Installation
`zlevis` can be installed with `meson`, after cloning the repository, setup the build directory: Zlevis can be installed with `meson`, after cloning the repository, setup the build directory
``` ```
$ meson setup builddir $ meson setup builddir
@ -14,7 +14,7 @@ $ meson setup builddir
> Using the `--reconfigure` flag will reconfigure the build directory. > Using the `--reconfigure` flag will reconfigure the build directory.
Installation of the `zlevis` scripts is now performed with: Installation of the zlevis scripts is now performed with
``` ```
# meson install -C builddir # meson install -C builddir

2
meson.build
View file

@ -1,5 +1,5 @@
# Project definition # Project definition
project('zlevis', license: 'GPL3') project('zlevis', license: 'GPL3', version: '1')
# Define bindir # Define bindir
bindir = join_paths(get_option('prefix'), get_option('bindir')) bindir = join_paths(get_option('prefix'), get_option('bindir'))

2
src/zlevis-encrypt
View file

@ -186,7 +186,7 @@ trap 'rm -f "$tmp_primary_context" "$tmp_pcr_policy" "$tmp_jwk_pub" "$tmp_jwk_pr
# Create the TPM2 object for the JWK # Create the TPM2 object for the JWK
case "$tpm2tools_version" in case "$tpm2tools_version" in
4|5) printf "%s" "$jwk" | tpm2_create -Q -g "$hash" -C "$tmp_primary_context" -u "$tmp_jwk_pub" -r "$tmp_jwk_priv" -a "$obj_attr" -L "$policy_options" -i- || fail=$?;; 4|5) printf "%s" "$jwk" | tpm2_create -Q -g "$hash" -C "$tmp_primary_context" -u "$tmp_jwk_pub" -r "$tmp_jwk_priv" -a "$obj_attr" -L "${policy_options[@]}" -i- || fail=$?;;
*) fail=1;; *) fail=1;;
esac esac
if [ -n "$fail" ]; then if [ -n "$fail" ]; then