##// END OF EJS Templates
0
Unknown -
r695:8cb208392eb0
parent child
Show More
@@ -837,9 +837,6 if [ "$ENABLE_CRYPTFS" = true ] ; then
837 837
838 838 # Initialize encrypted partition
839 839 cryptsetup --verbose --debug -q luksFormat "${ROOT_LOOP}" -c "${CRYPTFS_CIPHER}" -h "${CRYPTFS_HASH}" -s "${CRYPTFS_XTSKEYSIZE}" .password
840
841 # Update temporary loop device
842 ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"
843 840
844 841 # Open encrypted partition and setup mapping
845 842 cryptsetup luksOpen "${ROOT_LOOP}" -d .password "${CRYPTFS_MAPPING}"
@@ -847,6 +844,9 if [ "$ENABLE_CRYPTFS" = true ] ; then
847 844 # Secure delete password keyfile
848 845 shred -zu .password
849 846
847 # Update temporary loop device
848 ROOT_LOOP="/dev/mapper/${CRYPTFS_MAPPING}"
849
850 850 # Wipe encrypted partition (encryption cipher is used for randomness)
851 851 dd if=/dev/zero of="${ROOT_LOOP}" bs=512 count="$(blockdev --getsz "${ROOT_LOOP}")"
852 852 fi
General Comments 0
Vous devez vous connecter pour laisser un commentaire. Se connecter maintenant