Nikita Dubrovskii
c6a53ef6e8
s390x: use 'libarchive' to modify initrd in SE case
2022-09-08 11:41:34 +02:00
Nikita Dubrovskii
769ac686f1
s390x: simplify 's390x-se-luks-gencpio' script
2022-09-05 12:08:35 +02:00
Nikita Dubrovskii
49ce9b0289
s390x: ensure both 'root' and 'boot' luks keys exist
2022-09-05 10:46:13 +02:00
Nikita Dubrovskii
14a7c0c74b
s390x: rename sd-boot to sdboot
...
Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com >
2022-06-24 15:15:57 +02:00
Nikita Dubrovskii
972f00e483
s390x: do not unpack existing initrd, just append LUKS keys to its copy
...
Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com >
2022-05-27 12:06:33 +02:00
Nikita Dubrovskii
b03fa626f1
s390x: fail on error during reading of SecureExecution sysfs flag
2022-05-25 11:00:34 -04:00
Nikita Dubrovskii
d000569859
s390x: ensure SecureExecution is enabled before sd-boot generation
...
Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com >
2022-05-23 18:24:43 +02:00
Nikita Dubrovskii
7a5c604ca3
s390x: generate sd-boot at its own partition
...
Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com >
2022-05-18 13:06:29 +02:00
Nikita Dubrovskii
d1ab18f327
s390x: add LUKS keyfile to 'sd-boot'
...
This allows to use Secure Execution with LUKS encrypted boot disk,
key and cryptab are stored only in 'sd-boot' encrypted image.
Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com >
2022-02-11 09:02:42 +01:00
Nikita Dubrovskii
c27b98a2cb
s390x: add "IBM Secure Execution for Linux" support
...
If system contains ibm-z-hostkey (fetched during ignition), than
ostree generates 'sd-boot' image and reboots into Secure Execution
Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com >
2022-02-11 09:00:38 +01:00
Nikita Dubrovskii