summaryrefslogtreecommitdiffstats
path: root/storage/formats/luks.py
Commit message (Collapse)AuthorAgeFilesLines
* Show the correct device path when formatting as swap or luks.David Lehman2010-02-161-1/+2
|
* Don't return the passphrase from hasKey. Should return a boolean.David Lehman2010-02-051-1/+1
|
* Add a "dict" attribute to Device and DeviceFormat classes.David Lehman2009-12-221-0/+9
| | | | | | | This attribute is a dict that describes the device or format instance with considerable detail. It is intended that the dict will be pickled using the shelve module, so values should be picklable objects. Keys should be descriptive strings.
* Add __str__ methods to the DeviceFormat classes.David Lehman2009-12-161-0/+16
|
* Whenever storage code tries to log a method call, do so into the ↵Ales Kozumplik2009-12-031-1/+1
| | | | | | | 'tmp/storage.log' file. (a part of #524980) Previously, the method call was logged into 'tmp/anaconda.log' which made the file harder to do anything useful with.
* Display progress or wait window when formatting devices.David Lehman2009-11-301-11/+23
| | | | | | If we are using an external utility to create the format we can use iutil.execWithPulseProgress. For formats we create using a python module we can only put up a waitWindow.
* Missing volume_key shouldn't break LUKS support completely. (#526899)David Lehman2009-10-121-1/+7
| | | | | | Live images don't contain volume_key, which makes sense since key escrow is kickstart-only functionality. At any rate, failure to import volume_key should only break key escrow.
* Add escrow supportMiloslav Trmač2009-09-141-0/+64
| | | | | | | | | | | | | | | | | | | | | | | | | | | Add support for storing an X.509 certificate used to encrypt the escrow data, and a "create backup passphrase" flag, to storage.formats.LUKS, and support for storing the same options of "autopart" globally to storage.Storage. While parsing kickstart directives, download the X.509 certificates specified in thekickstart file (if any), enabling network access if necessary, then store the data in the above-described storage objects. While autopartitioning, copy the "autopart" escrow options into each created LUKS volume. Finally, as a part of doPostInstall, find all LUKS volumes with escrow configured, create the escrow files and store them in /mnt/sysimage/root. Changes since the previous version: - Drop unused .encryptedDevice assignments - Move writeEscrowPackets inside doPostInstall - Fix bugs introduced while moving code to storage.formats.LUKS Further changes: - Don't pass escrow args to lvmpv format constructor. - Move backup passphrase generation into storage.devicelibs.crypto. - Use newer, clearer except syntax in storage.writeEscrowPackets.
* Show locked LUKS devices as "Encrypted (LUKS)", not "LUKS".David Lehman2009-07-211-0/+11
|
* Default to AES-XTS cipher mode with 512 bit key for new LUKS devices.David Lehman2009-04-141-0/+6
|
* Default to a name based on the uuid for existing luks mappings.David Lehman2009-03-131-1/+3
| | | | | This is what we default to in the device tree, so this just lines the two up.
* LUKS is not supported in the sense that _supported implies.David Lehman2009-03-041-1/+1
| | | | | | The supported attr is only used for deciding which formats should be included in the "fstype" combo in partition/lvm/raid dialogs. In this sense, luks is not supported.
* Separate checks for mapName and key/passphrase, add a destroy method.David Lehman2009-03-031-12/+17
| | | | | Also, set the mapName immediately after formatting since that's the earliest we can possibly have the UUID.
* Lots of minor fixes and cleanups. A non-exhaustive list follows.David Lehman2009-02-271-7/+11
| | | | | | | | | | | - Change minsize/maxsize to minSize/maxSize since that's the convention elsewhere throughout the code. - Redirect output from all external utilities to tty5, not /dev/null. - Don't waste calls to basename for debug log statements, especially when the device can be None. - Add lots of missing imports. - Fix lots of remnants of previous code usage.
* Make it easy to specify a format's device at creation/setup time.David Lehman2009-02-241-9/+2
|
* Clean up imports and various typos, add header blocks as needed.David Lehman2009-02-231-5/+5
|
* Replace old storage modules.David Lehman2009-02-231-0/+223