LUKS HW-OPAL support #1266
LUKS HW-OPAL support #1266
Conversation
Just a simple check based on the LUKS subsystem. We cannot remove an HW-OPAL LUKS format without admin password so just disable removing the format for now.
Similar to protected devices, a format can also be protected. Device with protected formats are also protected.
|
Blivet-GUI tests failed for commit 0742b64. @vojtechtrefny please check. |
|
Note: Tests are failing because storaged-project/libblockdev#1047 needs to be merged first for the "full" LUKS OPAL support. |
vojtechtrefny
force-pushed
the
3.10-devel_hw-opal-support
branch
from
0742b64 to
d5b4bff
Compare
|
Blivet-GUI tests failed for commit d5b4bff. @vojtechtrefny please check. |
This might change in the future, but for now we cannot allow removing these formats -- HW-OPAL needs to be removed using cryptsetup and removal requires the admin password to remove the associated locking range. Removing the LUKS header with wipefs won't remove the locking range.
Needs the latest libblockdev and cryptsetup 2.7. Creating the LUKS HW-OPAL format is controlled by specifying LUKS version to either "luks-hw-opal" (combination of hardware and software encryption layer) or "luks-hw-opal-only" (hardware encryption only).
vojtechtrefny
force-pushed
the
3.10-devel_hw-opal-support
branch
from
d5b4bff to
319e6a6
Compare
|
Blivet-GUI tests failed for commit 319e6a6. @vojtechtrefny please check. |
To make the naming consistent with the other projects.
|
Blivet-GUI tests failed for commit bf401c7. @vojtechtrefny please check. |
|
/packit test |
|
Blivet-GUI tests failed for commit 9500c96. @vojtechtrefny please check. |
vojtechtrefny
force-pushed
the
3.10-devel_hw-opal-support
branch
from
9500c96 to
ca4f13e
Compare
|
Blivet-GUI tests failed for commit ca4f13e. @vojtechtrefny please check. |
vojtechtrefny
force-pushed
the
3.10-devel_hw-opal-support
branch
from
ca4f13e to
acb179a
Compare
|
Blivet-GUI tests failed for commit acb179a. @vojtechtrefny please check. |
vojtechtrefny
force-pushed
the
3.10-devel_hw-opal-support
branch
from
acb179a to
d1aa494
Compare
|
Blivet-GUI tests failed for commit d1aa494. @vojtechtrefny please check. |
vojtechtrefny
force-pushed
the
3.10-devel_hw-opal-support
branch
from
d1aa494 to
cda2574
Compare
|
Blivet-GUI tests failed for commit cda2574. @vojtechtrefny please check. |
vojtechtrefny
force-pushed
the
3.10-devel_hw-opal-support
branch
2 times, most recently
from
593066d to
f211a0d
Compare
|
Blivet-GUI tests failed for commit f211a0d. @vojtechtrefny please check. |
Testing farm sets priority of their repositories to 9 which means the repo is prioritized over all other repositories including our Copr repo with daily builds preventing the latest libblockdev from being installed.
vojtechtrefny
force-pushed
the
3.10-devel_hw-opal-support
branch
from
f211a0d to
c0fe6c7
Compare
|
/packit test |
Work in progress support for creating and managing OPAL self encrypting drives with LUKS. This for now contains only support for recognizing pre-existing LUKS HW-OPAL devices, because this doesn't require any additional support from libblockdev (which creating and removing these devices will require).