forked from Mirror/pmbootstrap
06d91897da
format_and_mount_root() => format_luks_root(): * Rename to reflect what it's actually doing * Move the FDE check from format_luks_root to the only caller * Make arguments to "cryptsetup luksFormat" more readable format_and_mount_pm_crypt() => format_and_mount_root(): * Rename to reflect what it's actually doing * Don't overwrite device if doing FDE; instead provide the proper device in the caller The old function names were for historic reasons, early on it was only possible to create encrypted installations with pmbootstrap.
92 lines
3.6 KiB
Python
92 lines
3.6 KiB
Python
# Copyright 2020 Oliver Smith
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
import os
|
|
import logging
|
|
import pmb.chroot
|
|
|
|
|
|
def format_and_mount_boot(args):
|
|
mountpoint = "/mnt/install/boot"
|
|
device = "/dev/installp1"
|
|
filesystem = args.deviceinfo["boot_filesystem"] or "ext2"
|
|
logging.info("(native) format " + device + " (boot, " + filesystem + "), mount to " +
|
|
mountpoint)
|
|
if filesystem == "fat16":
|
|
pmb.chroot.root(args, ["mkfs.fat", "-F", "16", "-n", "pmOS_boot", device])
|
|
elif filesystem == "fat32":
|
|
pmb.chroot.root(args, ["mkfs.fat", "-F", "32", "-n", "pmOS_boot", device])
|
|
elif filesystem == "ext2":
|
|
pmb.chroot.root(args, ["mkfs.ext2", "-F", "-q", "-L", "pmOS_boot", device])
|
|
else:
|
|
raise RuntimeError("Filesystem " + filesystem + " is not supported!")
|
|
pmb.chroot.root(args, ["mkdir", "-p", mountpoint])
|
|
pmb.chroot.root(args, ["mount", device, mountpoint])
|
|
|
|
|
|
def format_luks_root(args, device):
|
|
"""
|
|
:param device: root partition on install block device (e.g. /dev/installp2)
|
|
"""
|
|
mountpoint = "/dev/mapper/pm_crypt"
|
|
|
|
logging.info(f"(native) format {device} (root, luks), mount to"
|
|
f" {mountpoint}")
|
|
logging.info(" *** TYPE IN THE FULL DISK ENCRYPTION PASSWORD (TWICE!) ***")
|
|
|
|
pmb.chroot.root(args, ["cryptsetup", "luksFormat",
|
|
"-q",
|
|
"--cipher", args.cipher,
|
|
"--iter-time", args.iter_time,
|
|
"--use-urandom",
|
|
device], output="interactive")
|
|
pmb.chroot.root(args, ["cryptsetup", "luksOpen", device, "pm_crypt"],
|
|
output="interactive")
|
|
|
|
if not os.path.exists(f"{args.work}/chroot_native/{mountpoint}"):
|
|
raise RuntimeError("Failed to open cryptdevice!")
|
|
|
|
|
|
def format_and_mount_root(args, device, root_label, sdcard):
|
|
"""
|
|
:param device: root partition on install block device (e.g. /dev/installp2)
|
|
:param root_label: label of the root partition (e.g. "pmOS_root")
|
|
:param sdcard: path to sdcard device (e.g. /dev/mmcblk0) or None
|
|
"""
|
|
# Format
|
|
if not args.rsync:
|
|
logging.info("(native) format " + device)
|
|
# Some downstream kernels don't support metadata_csum (#1364).
|
|
# When changing the options of mkfs.ext4, also change them in the
|
|
# recovery zip code (see 'grep -r mkfs\.ext4')!
|
|
mkfs_ext4_args = ["mkfs.ext4", "-O", "^metadata_csum", "-F",
|
|
"-q", "-L", root_label]
|
|
|
|
# When we don't know the file system size before hand like
|
|
# with non-block devices, we need to explicitely set a number of
|
|
# inodes. See #1717 and #1845 for details
|
|
if not sdcard:
|
|
mkfs_ext4_args = mkfs_ext4_args + ["-N", "100000"]
|
|
|
|
pmb.chroot.root(args, mkfs_ext4_args + [device])
|
|
|
|
# Mount
|
|
mountpoint = "/mnt/install"
|
|
logging.info("(native) mount " + device + " to " + mountpoint)
|
|
pmb.chroot.root(args, ["mkdir", "-p", mountpoint])
|
|
pmb.chroot.root(args, ["mount", device, mountpoint])
|
|
|
|
|
|
def format(args, size_reserve, root_label, sdcard):
|
|
"""
|
|
:param size_reserve: empty partition between root and boot in MiB (pma#463)
|
|
:param root_label: label of the root partition (e.g. "pmOS_root")
|
|
:param sdcard: path to sdcard device (e.g. /dev/mmcblk0) or None
|
|
"""
|
|
root_dev = "/dev/installp3" if size_reserve else "/dev/installp2"
|
|
|
|
if args.full_disk_encryption:
|
|
format_luks_root(args, root_dev)
|
|
root_dev = "/dev/mapper/pm_crypt"
|
|
|
|
format_and_mount_root(args, root_dev, root_label, sdcard)
|
|
format_and_mount_boot(args)
|