]> git.ipfire.org Git - thirdparty/systemd.git/commit - meson.build
Add support for systemd-tpm2 libcryptsetup plugin.
authorOndrej Kozina <okozina@redhat.com>
Tue, 16 Mar 2021 19:13:28 +0000 (20:13 +0100)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Mon, 26 Jul 2021 13:15:16 +0000 (15:15 +0200)
commitd1ae38d85ae458ba8126465d25789e2721a75dba
tree6a94b4a55181e4577d1c0781a7a5c0342d5296d8
parentc5a421b3b9d94b3a6736ac61aa5b085e66f2f76a
Add support for systemd-tpm2 libcryptsetup plugin.

Add support for systemd-tpm2 based LUKS2 device activation
via libcryptsetup plugin. This make the feature (tpm2 sealed
LUKS2 keyslot passphrase) usable from both systemd utilities
and cryptsetup cli.

The feature is configured via -Dlibcryptsetup-plugins combo
with default value set to 'auto'. It get's enabled automatically
when cryptsetup 2.4.0 or later is installed in build system.
12 files changed:
meson.build
meson_options.txt
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-systemd-tpm2.c [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-util.c [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-util.h [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/cryptsetup-token.h [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/cryptsetup-token.sym [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/luks2-tpm2.c [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/luks2-tpm2.h [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/meson.build [new file with mode: 0644]
src/cryptsetup/cryptsetup.c
src/shared/tpm2-util.h