Files
linuxkit/examples/dm-crypt.yml
2020-04-24 12:54:48 +02:00

44 lines
1.6 KiB
YAML

kernel:
image: linuxkit/kernel:5.4.30
cmdline: "console=tty0 console=ttyS0"
init:
- linuxkit/init:f670045ecb6ec31ea37dd10114366e9a1e915013
- linuxkit/runc:1eef77f5963e44e491abfe392206769037d47ae2
- linuxkit/containerd:8ee7a0d636fff9df7e13076f5492d06274e5f644
- linuxkit/ca-certificates:abfc6701b9ca17e34ac9439ce5946a247e720ff5
onboot:
- name: sysctl
image: linuxkit/sysctl:541f60fe3676611328e89e8bac251fc636b1a6aa
- name: dhcpcd
image: linuxkit/dhcpcd:2f8a9b670aa6e96a09db56ec45c9f07ef2a811ee
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
- name: format
image: linuxkit/format:0b75e494eea0312f3015e6c6f7c5927620d56c96
command: ["/usr/bin/format", "/dev/sda"]
- name: dm-crypt
image: linuxkit/dm-crypt:0ea63bfd97b719d185b69994b4856d97fbc8a2dd
command: ["/usr/bin/crypto", "crypt_dev", "/dev/sda1"]
- name: mount
image: linuxkit/mount:19fa297189166206ac97261679c3e31fb140d48f
command: ["/usr/bin/mountie", "/dev/mapper/crypt_dev", "/var/secure_storage"]
- name: bbox
image: busybox
command: ["sh", "-c", "echo 'secret things' >/var/secure_storage/secrets"]
binds:
- /var:/var
services:
- name: getty
image: linuxkit/getty:48f66df198981e692084bf70ab72b9fe2be0f880
env:
- INSECURE=true
- name: rngd
image: linuxkit/rngd:7fab61cca793113280397dcee8159f35dc37adcb
files:
- path: etc/dm-crypt/key
# the below key is just to keep the example self-contained
# !!! provide a proper key for production use here !!!
contents: "abcdefghijklmnopqrstuvwxyz123456"
trust:
org:
- linuxkit