rancher/kcrypt
1
0
Fork 0
mirror of https://github.com/kairos-io/kcrypt.git synced 2025-08-30 21:50:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

Expose tpm pcrs in command line

Browse Source 
Signed-off-by: Itxaka <itxaka@kairos.io>
This commit is contained in:
Itxaka 2024-05-22 09:40:01 +02:00
parent a0855d6876
commit edf09c4923
1 changed files with 20 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
main.go
View File

@ -25,27 +25,38 @@ func main() {
Name: "encrypt", Name: "encrypt",
Description: "Encrypts a partition", Description: "Encrypts a partition",
Usage: "Encrypts a partition", Usage: "Encrypts a partition",
ArgsUsage: "kcrypt [--version VERSION] [--tpm] LABEL", ArgsUsage: "kcrypt [--tpm] [--tpm-pcrs] [--public-key-pcrs] LABEL",
Flags: []cli.Flag{ Flags: []cli.Flag{
&cli.StringFlag{
Name: "version",
Value: "luks1",
Usage: "luks version to use",
},
&cli.BoolFlag{ &cli.BoolFlag{
Name: "tpm", Name: "tpm",
Usage: "Use TPM to lock the partition", Usage: "Use TPM measurements to lock the partition",
},
&cli.StringSliceFlag{
Name: "tpm-pcrs",
Usage: "tpm pcrs to bind to (single measurement)",
},
&cli.StringSliceFlag{
Name: "public-key-pcrs",
Usage: "public key pcrs to bind to (policy)",
Value: &cli.StringSlice{"11"},
}, },
}, },
Action: func(c *cli.Context) error { Action: func(c *cli.Context) error {
var err error
var out string
if c.NArg() != 1 { if c.NArg() != 1 {
return fmt.Errorf("requires 1 arg, the partition label") return fmt.Errorf("requires 1 arg, the partition label")
} }
out, err := lib.Luksify(c.Args().First(), c.String("version"), c.Bool("tpm")) if c.Bool("tpm") {
err = lib.LuksifyMeasurements(c.Args().First(), c.StringSlice("tpm-pcrs"), c.StringSlice("public-key-pcrs"))
} else {
out, err = lib.Luksify(c.Args().First())
fmt.Println(out)
}
if err != nil { if err != nil {
return err return err
} }
fmt.Println(out)
return nil return nil
}, },
}, },