8
8
# This script should be installed as
9
# "/usr/share/initramfs-tools/scripts/init-premount/mandos" which will
10
# eventually be "/scripts/init-premount/mandos" in the initrd.img
9
# "/usr/share/initramfs-tools/scripts/local-top/mandos" which will
10
# eventually be "/scripts/local-top/mandos" in the initrd.img file.
12
# No initramfs pre-requirements; we must instead run BEFORE cryptroot.
13
# This is not a problem, since cryptroot forces itself to run LAST.
28
for param in `cat /proc/cmdline`; do
30
ip=*) IPOPTS="${param#ip=}" ;;
32
# Split option line on commas
35
for mpar in ${param#mandos=}; do
39
connect) connect="" ;;
40
connect:*) connect="${mpar#connect:}" ;;
41
*) log_warning_msg "$0: Bad option ${mpar}" ;;
54
test -r /conf/conf.d/cryptroot
57
# Get DEVICE from /conf/initramfs.conf and other files
58
. /conf/initramfs.conf
59
for conf in /conf/conf.d/*; do
60
[ -f "${conf}" ] && . "${conf}"
62
if [ -e /conf/param.conf ]; then
66
# Override DEVICE from sixth field of ip= kernel option, if passed
68
*:*:*:*:*:*) # At least six fields
69
# Remove the first five fields
70
device="${IPOPTS#*:*:*:*:*:}"
71
# Remove all fields except the first one
72
DEVICE="${device%%:*}"
76
# Add device setting (if any) to plugin-runner.conf
77
if [ "${DEVICE+set}" = set ]; then
78
# Did we get the device from an ip= option?
79
if [ "${device+set}" = set ]; then
80
# Let ip= option override local config; append:
81
cat <<-EOF >>/conf/conf.d/mandos/plugin-runner.conf
83
--options-for=mandos-client:--interface=${DEVICE}
86
# Prepend device setting so any later options would override:
88
'1i--options-for=mandos-client:--interface='"${DEVICE}" \
89
/conf/conf.d/mandos/plugin-runner.conf
94
# If we are connecting directly, run "configure_networking" (from
95
# /scripts/functions); it needs IPOPTS and DEVICE
96
if [ "${connect+set}" = set ]; then
97
set +e # Required by library functions
100
if [ -n "$connect" ]; then
101
cat <<-EOF >>/conf/conf.d/mandos/plugin-runner.conf
103
--options-for=mandos-client:--connect=${connect}
29
test -w /conf/conf.d/cryptroot
108
31
# Do not replace cryptroot file unless we need to.
109
32
replace_cryptroot=no
112
35
mandos=/lib/mandos/plugin-runner
115
37
# parse /conf/conf.d/cryptroot. Format:
116
# target=sda2_crypt,source=/dev/sda2,rootdev,key=none,keyscript=/foo/bar/baz
117
# Is the root device specially marked?
119
while read -r options; do
121
rootdev,*|*,rootdev,*|*,rootdev)
122
# If the root device is specially marked, don't change all
123
# lines in crypttab by default.
127
done < /conf/conf.d/cryptroot
38
# target=sda2_crypt,source=/dev/sda2,key=none,keyscript=/foo/bar/baz
129
39
exec 3>/conf/conf.d/cryptroot.mandos
130
while read -r options; do
40
while read options; do
133
changethis="$changeall"
134
42
# Split option line on commas
added
removed
initramfs-tools-script
