Cryptsetup toolstack version bump (2.3.3-> 2.6.1) + reencryption cleanup (LUKS v1/v2 proper support + reencryption on Q4.2 + BTRFS dual LUKS containers install)#1541

Merged

tlaurion merged 13 commits intolinuxboot:masterfrom tlaurion:cryptsetup_version_bump-reencryption_cleanup

Oct 30, 2024

+2,344-949

Commits on Oct 30, 2024

Bump 5.10.5 kernel to 5.10.214
tlaurion
committed
cryptsetup2 toolstack version bump and script fixes to support multi-LUKS containers (BTRFS QubesOS 4.2)
tlaurion
committed
WiP: fake cryptsetup reencrypt call for testing local one last time: seems like luks passphrase change only happens on one of the containers; not all
tlaurion
committed
seal-totp: add missing PCR7 DEBUG call for CBFS measured content, add DEBUG for TOTP secret/qrcode output to console
tlaurion
committed
luks-functions: fix luks_change_passphrase which was only occuring on first LUKS volume, not all
tlaurion
committed
luks-functions: move secret placement from /tmp to /tmp/secret to be wiped when going to recovery shell and upon automatic cleanup as all other secret
tlaurion
committed
luks-functions: wording fixes
tlaurion
committed
Revert+adapt "WiP: fake cryptsetup reencrypt call for testing local one last time: seems like luks passphrase change only happens on one of the containers; not all"
tlaurion
committed
optiplex boards: bumper kernel from 5.10.5 to 5.10.214. No config file changes
tlaurion
committed
GUI scripts: add whiptail_error and whiptail_warning since linuxboot#1787 fixed the issue
tlaurion
committed
initrd/etc/luks-functions: fix path to wrong luks key for reencrypt call
tlaurion
committed
luks-functions: detect non-usb LUKS partitions that can be unlocked with prompted DRK then ask user to confirm that those are all ok to reencryt/change passphrase onto (oem factory reset/manual, wh…
tlaurion
committed
initrd/bin/kexec-seal-key initrd/etc/luks-functions: last fixups
tlaurion
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Cryptsetup toolstack version bump (2.3.3-> 2.6.1) + reencryption cleanup (LUKS v1/v2 proper support + reencryption on Q4.2 + BTRFS dual LUKS containers install)#1541

Commits on Oct 30, 2024

Bump 5.10.5 kernel to 5.10.214

cryptsetup2 toolstack version bump and script fixes to support multi-LUKS containers (BTRFS QubesOS 4.2)

WiP: fake cryptsetup reencrypt call for testing local one last time: seems like luks passphrase change only happens on one of the containers; not all

seal-totp: add missing PCR7 DEBUG call for CBFS measured content, add DEBUG for TOTP secret/qrcode output to console

luks-functions: fix luks_change_passphrase which was only occuring on first LUKS volume, not all

luks-functions: move secret placement from /tmp to /tmp/secret to be wiped when going to recovery shell and upon automatic cleanup as all other secret

luks-functions: wording fixes

Revert+adapt "WiP: fake cryptsetup reencrypt call for testing local one last time: seems like luks passphrase change only happens on one of the containers; not all"

optiplex boards: bumper kernel from 5.10.5 to 5.10.214. No config file changes

GUI scripts: add whiptail_error and whiptail_warning since linuxboot#1787 fixed the issue

initrd/etc/luks-functions: fix path to wrong luks key for reencrypt call

luks-functions: detect non-usb LUKS partitions that can be unlocked with prompted DRK then ask user to confirm that those are all ok to reencryt/change passphrase onto (oem factory reset/manual, wh…

initrd/bin/kexec-seal-key initrd/etc/luks-functions: last fixups