summaryrefslogtreecommitdiffstats
path: root/storage/devicelibs/crypto.py
Commit message (Collapse)AuthorAgeFilesLines
* iutil.execWithRedirect() hasn't used searchPath= since 2006. Take it out.Peter Jones2010-01-151-4/+2
| | | | | iutil.execWithRedirect() stopped doing anything with searchPath in 2006 when clumens committed d0dec24. Remove these silly vestigal bits.
* Add escrow supportMiloslav Trmač2009-09-141-0/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | Add support for storing an X.509 certificate used to encrypt the escrow data, and a "create backup passphrase" flag, to storage.formats.LUKS, and support for storing the same options of "autopart" globally to storage.Storage. While parsing kickstart directives, download the X.509 certificates specified in thekickstart file (if any), enabling network access if necessary, then store the data in the above-described storage objects. While autopartitioning, copy the "autopart" escrow options into each created LUKS volume. Finally, as a part of doPostInstall, find all LUKS volumes with escrow configured, create the escrow files and store them in /mnt/sysimage/root. Changes since the previous version: - Drop unused .encryptedDevice assignments - Move writeEscrowPackets inside doPostInstall - Fix bugs introduced while moving code to storage.formats.LUKS Further changes: - Don't pass escrow args to lvmpv format constructor. - Move backup passphrase generation into storage.devicelibs.crypto. - Use newer, clearer except syntax in storage.writeEscrowPackets.
* Bring luks_add_key and luks_remove_key back into devicelibs.crypto.David Lehman2009-04-241-4/+65
| | | | | | | | In order to include these in pycryptsetup we had to create yet another duplicate copy of execWithRedirect. This patch brings them back into anaconda so we can easily modify them if needed until the day when pycryptsetup has this functionality. It also allows us to redirect the output to someplace useful for debugging.
* Fixes of errors shown by pylint that didn't get into the beta build.Martin Gracik2009-03-311-1/+0
|
* Do not pass None values into nonmandatory arguments, you are screwing the ↵Martin Sivak2009-03-061-1/+9
| | | | default values..
* Fix some remaining errors and require higher version of pycryptsetupMartin Sivak2009-03-031-2/+2
|
* Integrate the python-cryptsetup packageMartin Sivak2009-03-031-123/+35
|
* Lots of minor fixes and cleanups. A non-exhaustive list follows.David Lehman2009-02-271-15/+15
| | | | | | | | | | | - Change minsize/maxsize to minSize/maxSize since that's the convention elsewhere throughout the code. - Redirect output from all external utilities to tty5, not /dev/null. - Don't waste calls to basename for debug log statements, especially when the device can be None. - Add lots of missing imports. - Fix lots of remnants of previous code usage.
* Clean up imports, add header blocks as needed.David Lehman2009-02-231-1/+1
|
* Replace old storage modules.David Lehman2009-02-231-0/+195