Add initcpio script to autodetect external luks root key

This commit is contained in:
ItsDrike 2021-11-24 00:04:32 +01:00
parent caef6a84c5
commit 4929c281d2
No known key found for this signature in database
GPG key ID: FB8CA11A2CF3A843
3 changed files with 55 additions and 1 deletions

View file

@ -0,0 +1,27 @@
#!/bin/bash
build() {
add_dir "/mnt"
add_module loop
add_module dm-crypt
add_runscript
}
help() {
cat <<EOF
Open root partition with LUKS root key present on internal
or external accessible non-encrypted partition.
To use this hook, specify lukskeyfile in kernel parameters.
This hook is designed to copy over the specified key file into
initramfs internal path designated as cryptkey by encrypt hook.
lukskeyfile=rootKeyDev:rootKey[:cryptkeyLoc]
rootKeyDev = /path/to/rootKeyDev, UUID=uuid-of-rootKeyDev
rootKey = /path/to/rootKey in rootKeyDev
cryptkeyLoc = /path/to/cryptkey in initramfs.
Default values
cryptkeyLoc=/crypto_keyfile.bin
EOF
}