Initramfs support for root on encrypted bcachefs
🕑 Added 2018-02-11 19:32:56 +0000 UTC I just pushed initrams hooks/scripts for handling a bcachefs encrypted root filesystem - after you make install in bcachefs-tools, they'll be picked up next time you generate an initramfs, and if your root filesystem is encrypted you'll be promted for the passphrase to unlock it when booting up.I've only tested it on debian. It could also be prettier, too - patches welcome.
Comments
Kent Overstreet
It's a clean slate design: <a href="https://bcachefs.org/Encryption/" rel="nofollow noopener" target="_blank">https://bcachefs.org/Encryption/</a>
veritanuda
What is that based on ? Encfs ?
Kent Overstreet
That's a good point. Want to submit a patch?
Are you referring to this commit <a href="https://evilpiepirate.org/git/bcachefs-tools.git/commit/initramfs?id=813862a47ca866082ca3002441df6c13b47f1b0d" rel="nofollow noopener" target="_blank">https://evilpiepirate.org/git/bcachefs-tools.git/commit/initramfs?id=813862a47ca866082ca3002441df6c13b47f1b0d</a> ? I notice that you're doing an infinite loop until successful there. Most of initramfs limits the amount of retries to make sure that, after some (or a lot of) time, you can get a root shell to fix any problems. You're unconditional infinite loop (apparently) breaks that.
:D
Kent Overstreet
Have been for awhile...
Does this mean you are starting to lay the groundwork for upstreaming bcachefs?
wow, badass!
Kent Overstreet
Native bcachefs encryption
Encrypted LUKS or native bcachefs encryption?