gardouille-dotfiles
/
scripts
1
0
Fork 0
Code Issues 1 Pull Requests Projects 1 Releases Wiki Activity

Ensure to use plain64 for Luks cipher

This commit is contained in:
gardouille 2020-10-22 17:06:29 +02:00
parent 69c1c68661
commit e92a49aca3
Signed by: gardouille
GPG Key ID: E759BAA22501AF32
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian/chroot.install vendored
View File

@ -69,7 +69,7 @@ if [ "${manage_part}" -eq 0 ]; then
parted "${hdd}" set 2 lvm on
if [ "${manage_luks}" -eq 0 ]; then
rm -f -- "${luks_key_file}" && printf '%b' "${luks_passphrase}" > "${luks_key_file}"
cryptsetup -c aes-xts-plain -s 512 --use-random -y luksFormat "${hdd}"2 "${luks_passphrase}" --key-file "${luks_key_file}" || exit 2
cryptsetup -c aes-xts-plain64 -s 512 --use-random -y luksFormat "${hdd}"2 "${luks_passphrase}" --key-file "${luks_key_file}" || exit 2
cryptsetup luksOpen "${hdd}"2 "${luks_pv_name}" --key-file "${luks_key_file}" || exit 2
pvcreate /dev/mapper/"${luks_pv_name}" || exit 3
vgcreate "${vgname}" /dev/mapper/"${luks_pv_name}" || exit 3