From: Antonio Alvarez Feijoo <antonio.feijoo@suse.com>
Date: Wed, 24 Nov 2021 07:32:17 +0000 (+0100)
Subject: feat(crypt): check if fido2 module is needed in hostonly mode
X-Git-Tag: 056~66
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d5fd030cc285730e1a1b9e0e78a1e1dc4daabfe0;p=thirdparty%2Fdracut.git

feat(crypt): check if fido2 module is needed in hostonly mode

In hostonly mode, include the fido2 module if any encrypted volumes
are configured to be decrypted using a FIDO2 security token.
---

diff --git a/modules.d/90crypt/module-setup.sh b/modules.d/90crypt/module-setup.sh
index 639d9cddd..fce898f8f 100755
--- a/modules.d/90crypt/module-setup.sh
+++ b/modules.d/90crypt/module-setup.sh
@@ -24,6 +24,9 @@ depends() {
         if grep -q "tpm2-device=" "$dracutsysrootdir"/etc/crypttab; then
             deps+=" tpm2-tss"
         fi
+        if grep -q -e "fido2-device=" -e "fido2-cid=" "$dracutsysrootdir"/etc/crypttab; then
+            deps+=" fido2"
+        fi
     fi
     echo "$deps"
     return 0