]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
sysext: do not attempt to unlock images interactively
authorLuca Boccassi <luca.boccassi@gmail.com>
Tue, 26 Aug 2025 18:12:53 +0000 (19:12 +0100)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Wed, 17 Sep 2025 12:07:30 +0000 (14:07 +0200)
These images are not using a passphrase, they are using keys
or at most TPM-based sealing (not yet implemented, for contexts).

Do not use the interactive helper, as it will block and ask the
user for a password if it fails to find the signing cert, which
is not useful for this tool.

Fixes https://github.com/systemd/systemd/issues/33179

src/sysext/sysext.c

index 005ea6d977dac5fc56739505d74b22ec9a2f8c33..d849ee261061934728b8dcc8ae5b5d0812229caf 100644 (file)
@@ -1830,10 +1830,7 @@ static int merge_subprocess(
                         if (r < 0)
                                 return r;
 
-                        r = dissected_image_decrypt_interactively(
-                                        m, NULL,
-                                        &verity_settings,
-                                        flags);
+                        r = dissected_image_decrypt(m, /* passphrase= */ NULL, &verity_settings, flags);
                         if (r < 0)
                                 return r;