kairos-agent/internal/agent/hooks/kcrypt.go

package hook

import (
	"fmt"
	"os"
	"time"

	config "github.com/kairos-io/kairos/pkg/config"
	"github.com/kairos-io/kairos/pkg/machine"
	"github.com/kairos-io/kairos/pkg/utils"
	cp "github.com/otiai10/copy"

	pi "github.com/kairos-io/kcrypt/pkg/partition_info"
)

type Kcrypt struct{}

func (k Kcrypt) Run(c config.Config) error {

	if len(c.Install.Encrypt) == 0 {
		return nil
	}

	machine.Mount("COS_OEM", "/oem") //nolint:errcheck
	defer func() {
		machine.Umount("/oem") //nolint:errcheck
	}()

	_ = os.MkdirAll("/oem/system/discovery", 0650)

	for _, p := range c.Install.Encrypt {
		out, err := utils.SH(fmt.Sprintf("kcrypt encrypt %s", p))
		if err != nil {
			fmt.Printf("could not encrypt partition: %s\n", out+err.Error())
			if c.FailOnBundleErrors {
				return err
			}
			// Give time to show the error
			time.Sleep(10 * time.Second)
			return nil // do not error out
		}

		partitionInfo, _, err := pi.NewPartitionInfoFromFile(pi.DefaultPartitionInfoFile)
		if err != nil {
			fmt.Printf("Could not parse partition info file")
			if c.FailOnBundleErrors {
				return err
			}
		}
		err = partitionInfo.UpdateMapping(out)
		if err != nil {
			fmt.Println("Failed updating the partition info file: ", err.Error())
			if c.FailOnBundleErrors {
				return err
			}
		}
	}

	if c.Install.SkipEncryptCopyPlugins {
		fmt.Println("Skip discovery plugin copy")
		return nil
	}

	err := cp.Copy("/system/discovery", "/oem/system/discovery")
	if err != nil {
		fmt.Println("Failed during copying discovery plugins: ", err.Error())
		if c.FailOnBundleErrors {
			return err
		}
	}

	return nil
}