It should work

This commit is contained in:
nils 2025-01-05 03:12:23 +01:00
commit c513e63fbd
2 changed files with 37 additions and 0 deletions

16
module-setup.sh Executable file
View file

@ -0,0 +1,16 @@
#!/bin/bash
depends() {
echo udev-rules zfs
return 0
}
install() {
# Install the appropriate binaries and libraries
inst_multiple /usr/bin /usr/bin/zlevis* /usr/bin/jose /usr/bin/tpm2* /usr/bin/mktemp
inst_multiple /usr/lib /usr/lib/libtss2-tcti*
# Run the zlevis decryption hook before the 90zfs hook
inst_hook pre-mount 85 "${moddir}/zlevis.sh"
inst_simple "${moddir}/zlevis.sh" "/sbin/zlevis.sh"
}

21
zlevis.sh Executable file
View file

@ -0,0 +1,21 @@
#!/bin/sh
# First make sure the zfs kmod is loaded
modprobe zfs 2>/dev/null
udevadm settle
# Inspired by Alpine Linux's mkinitfs script -
local _root_vol="${root}"
local _root_pool="${_root_vol%%/*}"
zpool import -N -d /dev $_root_pool
if [ $(zpool list -H -o feature@encryption $_root_pool) = "active" ]; then
local _encryption_root=$(zfs get -H -o value encryptionroot $_root_vol)
if [ "$_encryption_root" != "-" ]; then
zlevis-fetch || echo "Zlevis-fetch failed!"
fi
else
echo "Something went wrong with zlevis-dracut!"
fi