mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
f68d3932c7
With the recent changes in the pkey kernel module to split it up into sub-modules, as well as the addition to support Secure Execution retrievable secrets, an update to the list of modules to copy to initrd is required. Besides the pkey module itself, all its sub-modules must be copied. Furthermore, sub-module pkey_uv requires the uvdevice modules, so copy this, too. While at it, remove the old drivers zcrypt_cex2a and zcrypt_pcixcc, those are not provided anymore since at least 2 years. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Acked-by: Steffen Eiden <seiden@linux.ibm.com> Reviewed-by: Harald Freudenberger <freude@linux.ibm.com> Signed-off-by: Steffen Eiden <seiden@linux.ibm.com>
46 lines
907 B
Bash
46 lines
907 B
Bash
#!/bin/sh
|
|
#
|
|
# Copyright IBM Corp. 2022
|
|
# Copyright Canonical Ltd 2018
|
|
#
|
|
# s390-tools is free software; you can redistribute it and/or modify
|
|
# it under the terms of the MIT license. See LICENSE for details.
|
|
#
|
|
# hooks/s390-tools-zkey
|
|
# This hook script adds zkey related utilities and zkey repository
|
|
# in the initramfs
|
|
#
|
|
|
|
# Needs to run after udev or resulting udev rules could be overwritten
|
|
PREREQ="udev"
|
|
|
|
prereqs()
|
|
{
|
|
echo "$PREREQ"
|
|
}
|
|
|
|
case $1 in
|
|
prereqs)
|
|
prereqs
|
|
exit 0
|
|
;;
|
|
esac
|
|
|
|
. /usr/share/initramfs-tools/hook-functions
|
|
|
|
# Add zcrypt modules
|
|
zdev_modules="uvdevice pkey pkey_cca pkey_ep11 pkey_pckmo pkey_uv pkey_sysfs paes_s390 zcrypt zcrypt_cex4"
|
|
|
|
for x in $zdev_modules ; do
|
|
manual_add_modules ${x}
|
|
done
|
|
|
|
# copy utils
|
|
copy_exec /sbin/chzcrypt
|
|
copy_exec /sbin/lszcrypt
|
|
copy_exec /usr/bin/zkey
|
|
copy_exec /usr/bin/zkey-cryptsetup
|
|
|
|
mkdir -p "${DESTDIR}/etc"
|
|
cp -a /etc/zkey "${DESTDIR}/etc/"
|