move to clean crypt handling

This commit is contained in:
Mikaël Cluseau
2023-02-02 00:28:36 +01:00
parent 3c7d56ae48
commit 69cc01db9b
5 changed files with 172 additions and 125 deletions

View File

@ -26,8 +26,9 @@ networks:
- eno.*
- enp.*
script: |
ip a add 2001:41d0:306:168f::1337:2eed/64 dev $iface
ip li set $iface up
udhcpc $iface
#udhcpc $iface
lvm:
- vg: storage
@ -52,18 +53,28 @@ lvm:
lvs:
- name: bootstrap
crypt: bootstrap
size: 2g
- name: varlog
crypt: varlog
extents: 10%FREE
# size: 10g
- name: podman
extents: 10%FREE
# size: 10g
- name: dls
crypt: dls
extents: 100%FREE
# size: 10g
crypt:
- dev: /dev/storage/bootstrap
- dev: /dev/storage/dls
bootstrap:
dev: /dev/mapper/bootstrap
#seed: https://direktil.novit.io/bootstraps/dls
# TODO seed: https://direktil.novit.io/bootstraps/dls-crypt
seed: http://192.168.10.254:7606/hosts/m1/bootstrap.tar
# TODO seed_sign_key: "..."
# TODO load_and_close: true