packaging: Add cryptsetup support in Guest kernel and rootfs

Add required kernel config for dm-crypt/dm-integrity/dm-verity
and related crypto config.

Add userspace command line tools for disk encryption support
and ext4 file system utilities.

Fixes: #6674

Signed-off-by: Arron Wang <arron.wang@intel.com>
This commit is contained in:
Arron Wang
2022-05-04 16:35:49 +08:00
committed by Fabiano Fidêncio
parent eb1bfa922b
commit 31c0ad2076
7 changed files with 33 additions and 1 deletions

View File

@@ -270,6 +270,10 @@ get_kernel_frag_path() {
fi
if [[ "${conf_guest}" != "" ]];then
info "Enabling config for confidential guest trust storage protection"
local cryptsetup_configs="$(ls ${common_path}/confidential_containers/cryptsetup.conf)"
all_configs="${all_configs} ${cryptsetup_configs}"
info "Enabling config for '${conf_guest}' confidential guest protection"
local conf_configs="$(ls ${arch_path}/${conf_guest}/*.conf)"
all_configs="${all_configs} ${conf_configs}"