bcachefs-tools/checks/encrypted-unlock.sh

40 lines
726 B
Bash
Raw Normal View History

#!/usr/bin/env bash
set -euxo pipefail
blkdev="/dev/vdb"
mnt="/tmp/mnt"
pw=$(genpass)
uuid=$(uuidgen)
# link user and session keyrings so that the key can be found by the kernel
keyctl link @u @s
echo "$pw" | bcachefs format \
--verbose \
--encrypted \
--uuid "$uuid" \
--fs_label test-fs \
"$blkdev"
udevadm settle
mkdir -p "$mnt"
bcachefs unlock -c "$blkdev"
echo "$pw" | bcachefs unlock "$blkdev"
key_id=$(keyctl search @u user "bcachefs:$uuid")
bcachefs mount -v "$blkdev" "$mnt"
umount "$mnt"
keyctl unlink "$key_id"
echo "$pw" | bcachefs unlock -k session "$blkdev"
key_id=$(keyctl search @s user "bcachefs:$uuid")
mount -t bcachefs "$blkdev" "$mnt"
umount "$mnt"
keyctl unlink "$key_id"