feature: pre_lvm_crypt

This commit is contained in:
Mikaël Cluseau
2023-12-17 13:48:18 +01:00
parent 898c43b954
commit 12bfa6cfd6
9 changed files with 100 additions and 14 deletions

View File

@ -30,16 +30,23 @@ networks:
ip li set $iface up
#udhcpc $iface
pre_lvm_crypt:
- dev: /dev/vda
name: sys0
- dev: /dev/vdb
name: sys1
lvm:
- vg: storage
pvs:
n: 2
regexps:
- /dev/mapper/sys[01]
# to match full disks
- /dev/nvme[0-9]+n[0-9]+
- /dev/vd[a-z]+
- /dev/sd[a-z]+
- /dev/hd[a-z]+
#- /dev/nvme[0-9]+n[0-9]+
#- /dev/vd[a-z]+
#- /dev/sd[a-z]+
#- /dev/hd[a-z]+
# to match partitions:
#- /dev/nvme[0-9]+n[0-9]+p[0-9]+
#- /dev/vd[a-z]+[0-9]+
@ -67,12 +74,13 @@ lvm:
extents: 100%FREE
# size: 10g
crypt:
- dev: /dev/storage/bootstrap
- dev: /dev/storage/dls
#crypt:
#- dev: /dev/storage/bootstrap
#- dev: /dev/storage/dls
bootstrap:
dev: /dev/mapper/bootstrap
#dev: /dev/mapper/bootstrap
dev: /dev/storage/bootstrap
# TODO seed: https://direktil.novit.io/bootstraps/dls-crypt
seed: http://192.168.10.254:7606/hosts/m1/bootstrap.tar
# TODO seed_sign_key: "..."