dépôts
/
lhc
/
ateliers.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (from parent 1:
5e97443
)
Ajout : vm_host : rule_vm_attach : assert pas d'autre console attachée (car ça ne...
author
Julien Moutinho
<julm+burette@autogeree.net>
Tue, 19 Feb 2013 21:51:16 +0000
(22:51 +0100)
committer
Julien Moutinho
<julm+burette@autogeree.net>
Tue, 19 Feb 2013 22:12:41 +0000
(23:12 +0100)
vm_host
patch
|
blob
|
history
diff --git
a/vm_host
b/vm_host
index
b99086b
..
e855630
100755
(executable)
--- a/
vm_host
+++ b/
vm_host
@@
-91,6
+91,7
@@
rule_vm_start () {
rule vm_attach
}
rule_vm_attach () {
rule vm_attach
}
rule_vm_attach () {
+ assert '! pgrep -f "sudo xm console $vm_fqdn"'
cat <<-EOF
NOTE: Ctrl-] pour se détacher de la console
EOF
cat <<-EOF
NOTE: Ctrl-] pour se détacher de la console
EOF
@@
-214,33
+215,33
@@
rule_part_lvm_umount () {
}
rule_part_randomize () { # SYNTAX: $part # NOTE: à anticiper
}
rule_part_randomize () { # SYNTAX: $part # NOTE: à anticiper
- local part=
$1
+ local part=
"$1"
eval "sudo dd if=/dev/urandom of=\$vm_dev_disk_$part"
}
rule_part_randomize_stat () { # SYNTAX: $part # DESCRIPTION: fait afficher la progression de rule_part_randomize
eval "sudo dd if=/dev/urandom of=\$vm_dev_disk_$part"
}
rule_part_randomize_stat () { # SYNTAX: $part # DESCRIPTION: fait afficher la progression de rule_part_randomize
- local part=
$1
+ local part=
"$1"
eval "pkill -USR1 -f \"^dd if=/dev/urandom of=\$vm_dev_disk_$part\""
}
rule__part_encrypted_format () { # SYNTAX: $part # DESCRIPTION: formatage d'une partition distincte de /
# NOTE: la clef de chiffrement est dérivée de celle de /,
# / doit être déchiffrée pour que cela fonctionne.
eval "pkill -USR1 -f \"^dd if=/dev/urandom of=\$vm_dev_disk_$part\""
}
rule__part_encrypted_format () { # SYNTAX: $part # DESCRIPTION: formatage d'une partition distincte de /
# NOTE: la clef de chiffrement est dérivée de celle de /,
# / doit être déchiffrée pour que cela fonctionne.
- local part=
$1
- eval "local dev=\
$vm_dev_disk_$part
"
+ local part=
"$1"
+ eval "local dev=\
"\$vm_dev_disk_$part\"
"
test ! -e /dev/mapper/${vm_lvm_lv}_root_deciphered ||
sudo /bin/sh -c "/lib/cryptsetup/scripts/decrypt_derived ${vm_lvm_lv}_root_deciphered |
cryptsetup luksFormat --hash=sha512 --key-size=512 \
--cipher=aes-xts-essiv:sha256 --key-file=- --align-payload=8 $dev"
}
rule__part_encrypted_mount () { # SYNTAX: $part
test ! -e /dev/mapper/${vm_lvm_lv}_root_deciphered ||
sudo /bin/sh -c "/lib/cryptsetup/scripts/decrypt_derived ${vm_lvm_lv}_root_deciphered |
cryptsetup luksFormat --hash=sha512 --key-size=512 \
--cipher=aes-xts-essiv:sha256 --key-file=- --align-payload=8 $dev"
}
rule__part_encrypted_mount () { # SYNTAX: $part
- local part=
$1
- eval "local dev=\
$vm_dev_disk_$part
"
+ local part=
"$1"
+ eval "local dev=\
"\$vm_dev_disk_$part\"
"
test -e /dev/mapper/${vm_lvm_lv}_${part}_deciphered ||
sudo /bin/sh -c "/lib/cryptsetup/scripts/decrypt_derived ${vm_lvm_lv}_root_deciphered |
cryptsetup luksOpen --key-file=- $dev ${vm_lvm_lv}_${part}_deciphered"
}
rule__part_encrypted_umount () { # SYNTAX: $part
test -e /dev/mapper/${vm_lvm_lv}_${part}_deciphered ||
sudo /bin/sh -c "/lib/cryptsetup/scripts/decrypt_derived ${vm_lvm_lv}_root_deciphered |
cryptsetup luksOpen --key-file=- $dev ${vm_lvm_lv}_${part}_deciphered"
}
rule__part_encrypted_umount () { # SYNTAX: $part
- local part=
$1
- eval "local dev=\
$vm_dev_disk_$part
"
+ local part=
"$1"
+ eval "local dev=\
"\$vm_dev_disk_$part\"
"
test ! -e /dev/mapper/${vm_lvm_lv}_${part}_deciphered ||
sudo cryptsetup luksClose ${vm_lvm_lv}_${part}_deciphered
}
test ! -e /dev/mapper/${vm_lvm_lv}_${part}_deciphered ||
sudo cryptsetup luksClose ${vm_lvm_lv}_${part}_deciphered
}