Subject: [alpine-devel] [PATCH] Main/mkinitfs - small Patch for LUKS / Cryptsetup

From: IT Offshore <[email-masked]>
Date: Tue, 11 Feb 2014 22:43:42 +0000

small patch to run "apk fix linux-grsec" if /etc/crypttab contains "luks"

This will prevent unbootable encrypted systems after kernel upgrades.
---
 main/mkinitfs/mkinitfs.trigger | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/main/mkinitfs/mkinitfs.trigger b/main/mkinitfs/mkinitfs.trigger
index cedf363..644c534 100644
--- a/main/mkinitfs/mkinitfs.trigger
+++ b/main/mkinitfs/mkinitfs.trigger
@@ -1,5 +1,14 @@
 #!/bin/sh
 
+NORMAL="\033[1;0m"
+STRONG="\033[1;1m"
+GREEN="\033[1;32m"
+
+print_green() {
+        local prompt="${GREEN}${STRONG}$1 ${NORMAL}"
+        printf "${prompt} %s\n"
+}
+
 for i in "$@"; do
 	# get last element in path
 	flavor=${i##*/}
@@ -29,5 +38,11 @@ for i in /boot/initramfs-[0-9]*; do
 	fi
 done
 
+# rebuild initramfs for Cryptsetup / LUKS
+if grep luks /etc/crypttab 1>/dev/null; then
+	print_green "Rebuilding Initramfs for LVM / Cryptsetup"
+	apk fix linux-grsec
+fi
+
 sync
 exit 0
-- 
1.8.5.4

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---

---

From: Timo Teras <[email-masked]>
Date: Wed, 12 Feb 2014 08:10:21 +0200

On Tue, 11 Feb 2014 22:43:42 +0000
IT Offshore <[email-masked]> wrote:

> diff --git a/main/mkinitfs/mkinitfs.trigger
> b/main/mkinitfs/mkinitfs.trigger index cedf363..644c534 100644

You should still not call 'apk' from apk script.

Could you explain what is the exact situation when mkinitfs.trigger
does not regen the initramfs, but it should. You should add that to the
monitoring list of the trigger script in APKBUILD, and make the
detection for that in the trigger script's first "for" loop where it
regens the initramfs images.

---