summaryrefslogtreecommitdiff
path: root/vmdb/plugins/cryptsetup.mdwn
diff options
context:
space:
mode:
authorLars Wirzenius <liw@liw.fi>2022-01-01 10:36:58 +0200
committerLars Wirzenius <liw@liw.fi>2022-01-01 21:59:41 +0200
commit55b4931b80b5b740f595efd82dc6bf0e9aceda5b (patch)
tree60e10932ae4bed1dad60e45fbcfd71db1648f288 /vmdb/plugins/cryptsetup.mdwn
parentd9956b88d68d881113bed48987e0f143f508be7a (diff)
downloadvmdb2-55b4931b80b5b740f595efd82dc6bf0e9aceda5b.tar.gz
feat: cryptsetup step
This adds a step to use cryptsetup to encrypt a block device with LUKS, using the cryptsetup tool. A crypttab is written by the fstab step. Sponsored-by: author
Diffstat (limited to 'vmdb/plugins/cryptsetup.mdwn')
-rw-r--r--vmdb/plugins/cryptsetup.mdwn18
1 files changed, 18 insertions, 0 deletions
diff --git a/vmdb/plugins/cryptsetup.mdwn b/vmdb/plugins/cryptsetup.mdwn
new file mode 100644
index 0000000..f438e4f
--- /dev/null
+++ b/vmdb/plugins/cryptsetup.mdwn
@@ -0,0 +1,18 @@
+Step: cryptsetup
+-----------------------------------------------------------------------------
+
+Use cryptsetup to set up encryption of a block device.
+
+Step keys:
+
+* `cryptsetup` &mdash; REQUIRED; tag of block device
+
+* `password` &mdash; REQUIRED; the encryption password
+
+* `name` &mdash; REQUIRED; name of the encrypted device when opened
+
+Example (in the .vmdb file):
+
+ - cryptsetup: cleartext_pv0
+ password: hunter2
+ name: pv0