Mail archive
alpine-devel

Re: [alpine-devel] [PATCH] Main/mkinitfs - small Patch for LUKS / Cryptsetup

From: Timo Teras <timo.teras_at_iki.fi>
Date: Wed, 12 Feb 2014 08:10:21 +0200

On Tue, 11 Feb 2014 22:43:42 +0000
IT Offshore <developer_at_it-offshore.co.uk> wrote:

> small patch to run "apk fix linux-grsec" if /etc/crypttab contains
> "luks"
>
> This will prevent unbootable encrypted systems after kernel upgrades.
> ---
> main/mkinitfs/mkinitfs.trigger | 15 +++++++++++++++
> 1 file changed, 15 insertions(+)
>
> diff --git a/main/mkinitfs/mkinitfs.trigger
> b/main/mkinitfs/mkinitfs.trigger index cedf363..644c534 100644
> --- a/main/mkinitfs/mkinitfs.trigger
> +++ b/main/mkinitfs/mkinitfs.trigger
> _at_@ -1,5 +1,14 @@
> #!/bin/sh
>
> +NORMAL="\033[1;0m"
> +STRONG="\033[1;1m"
> +GREEN="\033[1;32m"
> +
> +print_green() {
> + local prompt="${GREEN}${STRONG}$1 ${NORMAL}"
> + printf "${prompt} %s\n"
> +}
> +
> for i in "$_at_"; do
> # get last element in path
> flavor=${i##*/}
> _at_@ -29,5 +38,11 @@ for i in /boot/initramfs-[0-9]*; do
> fi
> done
>
> +# rebuild initramfs for Cryptsetup / LUKS
> +if grep luks /etc/crypttab 1>/dev/null; then
> + print_green "Rebuilding Initramfs for LVM / Cryptsetup"
> + apk fix linux-grsec
> +fi

You should still not call 'apk' from apk script.

Could you explain what is the exact situation when mkinitfs.trigger
does not regen the initramfs, but it should. You should add that to the
monitoring list of the trigger script in APKBUILD, and make the
detection for that in the trigger script's first "for" loop where it
regens the initramfs images.


---
Unsubscribe:  alpine-devel+unsubscribe_at_lists.alpinelinux.org
Help:         alpine-devel+help_at_lists.alpinelinux.org
---
Received on Wed Feb 12 2014 - 08:10:21 UTC