Try both Clevis and passphrase in /etc/fstab setup #3528
Conversation
jbaublitz
force-pushed
the
issue-stratisd-3349
branch
2 times, most recently
from
14e6469 to
bd0a8cc
Compare
|
@mvollmer I tested this patch and it resolves the linked issue. The one question I had was mainly about whether you had this problem at boot time too. I think we may take a similar approach but I'm not sure. |
|
@mulkieran I'm putting this in review after testing and bug fixes. |
jbaublitz
force-pushed
the
issue-stratisd-3349
branch
from
bd0a8cc to
02c269b
Compare
|
@mvollmer I've re-requested your review. I think I've resolved the issues you mentioned. |
jbaublitz
force-pushed
the
issue-stratisd-3349
branch
from
02c269b to
492a89e
Compare
|
@mvollmer After investigating a little bit more, I can confirm that the same problem affects the initrd scripts, but it's a little bit harder to solve there largely because we have intentionally separated the Clevis unlock method and the passphrase unlock method into separate dracut modules. This is largely because Anaconda does not support Clevis but does support the keyring unlock method for cryptsetup. These are distributed in separate packages as a result so Anaconda could theoretically support one without the other. I'll have to look into whether there's a way to set a flag based on whether executables are present or not in a dracut module. If we did that, we could potentially merge both dracut modules into a single, dynamic one that would also satisfy the requirement for Anaconda. |
|
@mvollmer We're ready to merge as soon as you're satisfied w/ the changes. |
Closes #3349