forks/linsk
forks/linsk
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Implement LUKS container mount

Browse source
This commit is contained in:
AlexSSD7 2023-09-27 14:49:48 +01:00
commit e25069e1f3
3 changed files with 35 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

8
cmd/run.go
View file

@ -61,8 +61,8 @@ var runCmd = &cobra.Command{
os.Exit(1)
}
if luksFlag && !allowLUKSLowMemoryFlag {
if vmMemAllocFlag < 2048 {
if (luksFlag || luksContainerFlag != "") && !allowLUKSLowMemoryFlag {
if vmMemAllocFlag < defaultMemAllocLUKS {
if vmMemAllocFlag != defaultMemAlloc {
slog.Warn("Enforcing minimum LUKS memory allocation. Please add --allow-luks-low-memory to disable this.", "min", vmMemAllocFlag, "specified", vmMemAllocFlag)
}
@ -75,6 +75,8 @@ var runCmd = &cobra.Command{
slog.Info("Mounting the device", "dev", vmMountDevName, "fs", fsType, "luks", luksFlag)
err := fm.Mount(vmMountDevName, vm.MountOptions{
LUKSContainerPreopen: luksContainerFlag,
FSType: fsType,
LUKS: luksFlag,
})
@ -128,6 +130,7 @@ var runCmd = &cobra.Command{
var (
luksFlag bool
luksContainerFlag string
allowLUKSLowMemoryFlag bool
shareListenIPFlag string
ftpExtIPFlag string
@ -138,6 +141,7 @@ var (
func init() {
runCmd.Flags().BoolVarP(&luksFlag, "luks", "l", false, "Use cryptsetup to open a LUKS volume (password will be prompted).")
runCmd.Flags().StringVar(&luksContainerFlag, "luks-container", "", `Specifies a device path (without "dev/" prefix) to preopen as a LUKS container (password will be prompted). Useful for accessing LVM partitions behind LUKS.`)
runCmd.Flags().BoolVar(&allowLUKSLowMemoryFlag, "allow-luks-low-memory", false, "Allow VM memory allocation lower than 2048 MiB when LUKS is enabled.")
runCmd.Flags().BoolVar(&debugShellFlag, "debug-shell", false, "Start a VM shell when the network file share is active.")