WIP: Add clevis packages; enable clevis-luks-askpass.path

coreos · Jul 2, 2020 · 5ebddcd · 5ebddcd
1 parent 0fd9cca
commit 5ebddcd
Show file tree

Hide file tree

Showing 3 changed files with 39 additions and 0 deletions.
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
@@ -84,6 +84,18 @@
     "cifs-utils": {
       "evra": "6.9-3.fc32.x86_64"
     },
+    "clevis": {
+      "evra": "13-1.fc32.x86_64"
+    },
+    "clevis-dracut": {
+      "evra": "13-1.fc32.x86_64"
+    },
+    "clevis-luks": {
+      "evra": "13-1.fc32.x86_64"
+    },
+    "clevis-systemd": {
+      "evra": "13-1.fc32.x86_64"
+    },
     "cloud-utils-growpart": {
       "evra": "0.31-6.fc32.noarch"
     },
@@ -135,6 +147,9 @@
     "cracklib": {
       "evra": "2.9.6-22.fc32.x86_64"
     },
+    "cracklib-dicts": {
+      "evra": "2.9.6-22.fc32.x86_64"
+    },
     "crun": {
       "evra": "0.13-2.fc32.x86_64"
     },
@@ -399,6 +414,9 @@
     "jansson": {
       "evra": "2.12-5.fc32.x86_64"
     },
+    "jose": {
+      "evra": "10-6.fc32.x86_64"
+    },
     "jq": {
       "evra": "1.6-4.fc32.x86_64"
     },
@@ -546,6 +564,9 @@
     "libipa_hbac": {
       "evra": "2.3.0-1.fc32.x86_64"
     },
+    "libjose": {
+      "evra": "10-6.fc32.x86_64"
+    },
     "libkcapi": {
       "evra": "1.1.5-2.fc32.x86_64"
     },
@@ -558,6 +579,9 @@
     "libldb": {
       "evra": "2.1.3-1.fc32.x86_64"
     },
+    "libluksmeta": {
+      "evra": "9-7.fc32.x86_64"
+    },
     "libmaxminddb": {
       "evra": "1.4.2-1.fc32.x86_64"
     },
@@ -756,6 +780,9 @@
     "lua-libs": {
       "evra": "5.3.5-7.fc32.x86_64"
     },
+    "luksmeta": {
+      "evra": "9-7.fc32.x86_64"
+    },
     "lvm2": {
       "evra": "2.03.09-1.fc32.x86_64"
     },
@@ -810,6 +837,9 @@
     "nftables": {
       "evra": "1:0.9.3-3.fc32.x86_64"
     },
+    "nmap-ncat": {
+      "evra": "2:7.80-4.fc32.x86_64"
+    },
     "npth": {
       "evra": "1.6-4.fc32.x86_64"
     },
@@ -1053,6 +1083,12 @@
     "toolbox": {
       "evra": "0.0.18-3.fc32.noarch"
     },
+    "tpm2-tools": {
+      "evra": "4.1.3-1.fc32.x86_64"
+    },
+    "tpm2-tss": {
+      "evra": "2.4.1-1.fc32.x86_64"
+    },
     "tzdata": {
       "evra": "2020a-1.fc32.noarch"
     },

diff --git a/manifests/ignition-and-ostree.yaml b/manifests/ignition-and-ostree.yaml
@@ -22,6 +22,8 @@ machineid-compat: false
 packages:
   - ignition
   - dracut-network
+  # for encryption
+  - clevis clevis-luks clevis-dracut clevis-systemd
 
 remove-from-packages:
   # We don't want systemd-firstboot.service. It conceptually conflicts with

diff --git a/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset b/overlay.d/05core/usr/lib/systemd/system-preset/40-coreos.preset
@@ -15,3 +15,4 @@ enable afterburn-sshkeys@.service
 enable zincati.service
 # Testing aid
 enable coreos-liveiso-success.service
+enable clevis-luks-askpass.path