blob: e968cdfae006df5a6088546b17e16d67da8d4089 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
#!/bin/bash
build() {
local mod
map add_module 'dm-crypt' 'dm-integrity' 'hid-generic?'
if [[ -n "$CRYPTO_MODULES" ]]; then
for mod in $CRYPTO_MODULES; do
add_module "$mod"
done
else
add_all_modules '/crypto/'
fi
add_binary 'cryptsetup'
map add_udev_rule \
'10-dm.rules' \
'13-dm-disk.rules' \
'95-dm-notify.rules'
# cryptsetup calls pthread_create(), which dlopen()s libgcc_s.so.1
add_binary '/usr/lib/libgcc_s.so.1'
# cryptsetup loads the legacy provider which is required for whirlpool
add_binary '/usr/lib/ossl-modules/legacy.so'
add_checked_modules '/input/touchscreen/'
add_binary '/usr/bin/unl0kr'
add_file '/etc/unl0kr.conf'
add_file '/usr/lib/udev/hwdb.bin'
add_binary '/usr/lib/udev/libinput-device-group'
add_binary '/usr/lib/udev/libinput-fuzz-extract'
add_binary '/usr/lib/udev/libinput-fuzz-to-zero'
map add_udev_rule \
'60-evdev.rules' \
'60-input-id.rules' \
'65-libwacom.rules' \
'70-mouse.rules' \
'70-touchpad.rules' \
'80-libinput-device-groups.rules' \
'90-libinput-fuzz-override.rules'
add_full_dir '/usr/share/libinput'
add_full_dir '/usr/share/X11/xkb'
add_runscript
}
help() {
cat <<HELPEOF
This hook allows for an encrypted root device. Users should specify the device
to be unlocked using 'cryptdevice=device:dmname' on the kernel command line,
where 'device' is the path to the raw device, and 'dmname' is the name given to
the device after unlocking, and will be available as /dev/mapper/dmname.
For unlocking via keyfile, 'cryptkey=device:fstype:path' should be specified on
the kernel cmdline, where 'device' represents the raw block device where the key
exists, 'fstype' is the filesystem type of 'device' (or auto), and 'path' is
the absolute path of the keyfile within the device.
Without specifying a keyfile, you will be prompted for the password at runtime
using a GUI program called unl0kr. unl0kr allows to enter the password with
an on-screen keyboard or a regular hardware keyboard.
HELPEOF
}
# vim: set ft=sh ts=4 sw=4 et:
|