github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-07-26 04:03:11 +00:00
Code Issues Projects Releases Wiki Activity

Ensure the encrypted swapfile is always created as it won't persist on a reboot

Browse Source 
Signed-off-by: Neil Gerring <ng@neilgerring.co.uk>
This commit is contained in:
Neil Gerring 2023-01-11 10:45:07 +00:00
parent e668b25a82
commit a745d00acd
No known key found for this signature in database
GPG Key ID: FD41F91B6EC63C31
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pkg/swap/swap.sh
View File

@ -114,7 +114,6 @@ done
## if a condition failed: ## if a condition failed:
### Required? exit 1 ### Required? exit 1
### Else? exit 0 ### Else? exit 0
if [ "$ENCRYPT" == "true" ]; then if [ "$ENCRYPT" == "true" ]; then
SWAPDEV=/dev/mapper/swapfile SWAPDEV=/dev/mapper/swapfile
else else
@ -140,7 +139,11 @@ if [ ! -f $path ] || ! [ $(stat -c "%s" $path) == $(disksize_to_count 1 $size) ]
cryptsetup open --type plain --key-file /dev/urandom --key-size=256 --cipher=aes-cbc-essiv:sha256 --offset=0 ${path} swapfile cryptsetup open --type plain --key-file /dev/urandom --key-size=256 --cipher=aes-cbc-essiv:sha256 --offset=0 ${path} swapfile
fi fi
/sbin/mkswap $SWAPDEV
elif [ "$ENCRYPT" == "true" ]; then
## Ensure the encrypted swap is created as it won't persist on a reboot
cryptsetup open --type plain --key-file /dev/urandom --key-size=256 --cipher=aes-cbc-essiv:sha256 --offset=0 ${path} swapfile
/sbin/mkswap $SWAPDEV /sbin/mkswap $SWAPDEV
fi fi
/sbin/swapon $SWAPDEV /sbin/swapon $SWAPDEV