Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

Re-verify Linux disk encryption #26693 (#29034)

Browse Source 
Fixes #26693 

Added functionality to verify that the escrowed LUKS disk encryption key is valid. To achieve this, two new fleetd tables were added: lsblk and  cryptsetup_luks_salt/table to compare the stored encryption key with the ones present on the host.
This commit is contained in:
Juan Fernandez
2025-05-22 16:15:26 -04:00
committed by GitHub
parent c8312c83c3
commit 55fec5283e
21 changed files with 731 additions and 93 deletions
Download Patch File Download Diff File Expand all files Collapse all files
orbit/changes/26693-verify-linux-escrowed-userkey
+2
View File
@@ -0,0 +1,2 @@
* Added a new Linux table 'lsblk' populated from the output of running 'lsblk -n -O'
* Added a new Linux table 'cryptsetup_luks_salt', given a device path returns all the key_slots and salts of said device.