Jookia <[email protected]> skribis:
> So I've come up with the following hack commit that effectively
> stops any sort of dependency management and adds some new targets
> for LVM and LUKS with a keyfile.
>
> Here's my current setup, take note that order of mapped devices
> matter since there's no dependency management:
>
> (mapped-devices (list (mapped-device
> (source "/dev/sda")
> (target "hdd")
> (type (luks-device-keyfile-mapping
> (local-file "/root/keyfile"))))
> (mapped-device
> (source "/dev/mapper/hdd")
> (target "matrix")
> (type lvm-device-mapping))))
>
> (file-systems (cons (file-system
> (device "/dev/mapper/matrix-root")
> (title 'device)
> (mount-point "/")
> (type "ext4"))
> %base-file-systems))
>
> (swap-devices '("/dev/mapper/matrix-swap"))
As you note, and as discussed on IRC, this is not OK because the private
key ends up being stored world-readable in the store. :-/
Am I missing the part you wanted to discuss?
Thanks,
Ludo’.
PS: I still intend to look at the patch series you sent ;-), just
prioritizing things that relate to 0.9.1.
