50 lines
1.2 KiB
Bash
50 lines
1.2 KiB
Bash
|
#!/bin/bash
|
||
|
|
if [ "$#" -ne 3 ]; then
|
||
|
|
echo "Usage: $0 <keyserver>"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
KEYSERVER=$1
|
||
|
|
IMAGE=$2
|
||
|
|
DEVICE=$3
|
||
|
|
|
||
|
|
if [ ! -e $IMAGE ]; then
|
||
|
|
logger "open_volume: Image file not found"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# if keyserver is not reachable, exit
|
||
|
|
if ! curl -s -I $KEYSERVER > /dev/null; then
|
||
|
|
logger "open_volume: Key server not reachable, exiting."
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# If device is already open, exit
|
||
|
|
if [ -e /dev/mapper/$DEVICE ]; then
|
||
|
|
echo "open_volume: Device already open, exiting."
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
uuid=$(cat /proc/cpuinfo | grep 'model name' | head -1)
|
||
|
|
uuid+=$(ip link show eth0 | grep ether | awk '{print $2}')
|
||
|
|
uuid+=$(sudo dmidecode -s system-uuid)
|
||
|
|
KEYID=$(echo -n "$uuid" | md5sum | awk '{print $1}')
|
||
|
|
|
||
|
|
logger "open_volume: Downloading key from key server,"
|
||
|
|
LOCALKEYFILE=$(mktemp)
|
||
|
|
curl -s -o $LOCALKEYFILE $KEYSERVER/$KEYID
|
||
|
|
if [ $? -ne 0 ]; then
|
||
|
|
logger "open_volume: Failed to download key from key server"
|
||
|
|
rm $LOCALKEYFILE
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
logger "open_volume: Key downloaded successfully, opening volume"
|
||
|
|
/usr/sbin/cryptsetup luksOpen $IMAGE $DEVICE -d $LOCALKEYFILE
|
||
|
|
if [ $? -ne 0 ]; then
|
||
|
|
logger "open_volume: Failed to open volume"
|
||
|
|
rm $LOCALKEYFILE
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
logger "open_volume: Volume opened successfully, removing key file"
|
||
|
|
rm $LOCALKEYFILE
|
||
|
|
exit 0
|