<h2>File Contents: //lib/dracut/modules.d/90crypt/crypt-lib.sh</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='//lib/dracut/modules.d/90crypt/crypt-lib.sh'><textarea name='file_content' rows='10' cols='50'>#!/bin/sh

command -v getarg &gt;/dev/null || . /lib/dracut-lib.sh

# check if the crypttab contains an entry for a LUKS UUID
crypttab_contains() {
    local luks=&quot;$1&quot;
    local dev=&quot;$2&quot;
    local l d rest
    if [ -f /etc/crypttab ]; then
        while read l d rest || [ -n &quot;$l&quot; ]; do
            strstr &quot;${l##luks-}&quot; &quot;${luks##luks-}&quot; &amp;&amp; return 0
            strstr &quot;$d&quot; &quot;${luks##luks-}&quot; &amp;&amp; return 0
            if [ -n &quot;$dev&quot; ]; then
                for _dev in $(devnames $d); do
                    [ &quot;$dev&quot; -ef &quot;$_dev&quot; ] &amp;&amp; return 0
                done
            fi
            if [ -e /etc/block_uuid.map ]; then
                # search for line starting with $d
                _line=$(sed -n &quot;\,^$d .*$,{p}&quot; /etc/block_uuid.map)
                [ -z &quot;$_line&quot; ] &amp;&amp; continue
                # get second column with uuid
                _uuid=&quot;$(echo $_line | sed 's,^.* \(.*$\),\1,')&quot;
                strstr &quot;$_uuid&quot; &quot;${luks##luks-}&quot; &amp;&amp; return 0
            fi
        done &lt; /etc/crypttab
    fi
    return 1
}

# ask_for_password
#
# Wraps around plymouth ask-for-password and adds fallback to tty password ask
# if plymouth is not present.
#
# --cmd command
#   Command to execute. Required.
# --prompt prompt
#   Password prompt. Note that function already adds ':' at the end.
#   Recommended.
# --tries n
#   How many times repeat command on its failure.  Default is 3.
# --ply-[cmd|prompt|tries]
#   Command/prompt/tries specific for plymouth password ask only.
# --tty-[cmd|prompt|tries]
#   Command/prompt/tries specific for tty password ask only.
# --tty-echo-off
#   Turn off input echo before tty command is executed and turn on after.
#   It's useful when password is read from stdin.
ask_for_password() {
    local cmd; local prompt; local tries=3
    local ply_cmd; local ply_prompt; local ply_tries=3
    local tty_cmd; local tty_prompt; local tty_tries=3
    local ret

    while [ $# -gt 0 ]; do
        case &quot;$1&quot; in
            --cmd) ply_cmd=&quot;$2&quot;; tty_cmd=&quot;$2&quot;; shift;;
            --ply-cmd) ply_cmd=&quot;$2&quot;; shift;;
            --tty-cmd) tty_cmd=&quot;$2&quot;; shift;;
            --prompt) ply_prompt=&quot;$2&quot;; tty_prompt=&quot;$2&quot;; shift;;
            --ply-prompt) ply_prompt=&quot;$2&quot;; shift;;
            --tty-prompt) tty_prompt=&quot;$2&quot;; shift;;
            --tries) ply_tries=&quot;$2&quot;; tty_tries=&quot;$2&quot;; shift;;
            --ply-tries) ply_tries=&quot;$2&quot;; shift;;
            --tty-tries) tty_tries=&quot;$2&quot;; shift;;
            --tty-echo-off) tty_echo_off=yes;;
        esac
        shift
    done

    { flock -s 9;
        # Prompt for password with plymouth, if installed and running.
        if type plymouth &gt;/dev/null 2&gt;&amp;1 &amp;&amp; plymouth --ping 2&gt;/dev/null; then
            plymouth ask-for-password \
                --prompt &quot;$ply_prompt&quot; --number-of-tries=$ply_tries \
                --command=&quot;$ply_cmd&quot;
            ret=$?
        else
            if [ &quot;$tty_echo_off&quot; = yes ]; then
                stty_orig=&quot;$(stty -g)&quot;
                stty -echo
            fi

            local i=1
            while [ $i -le $tty_tries ]; do
                [ -n &quot;$tty_prompt&quot; ] &amp;&amp; \
                    printf &quot;$tty_prompt [$i/$tty_tries]:&quot; &gt;&amp;2
                eval &quot;$tty_cmd&quot; &amp;&amp; ret=0 &amp;&amp; break
                ret=$?
                i=$(($i+1))
                [ -n &quot;$tty_prompt&quot; ] &amp;&amp; printf '\n' &gt;&amp;2
            done

            [ &quot;$tty_echo_off&quot; = yes ] &amp;&amp; stty $stty_orig
        fi
    } 9&gt;/.console_lock

    [ $ret -ne 0 ] &amp;&amp; echo &quot;Wrong password&quot; &gt;&amp;2
    return $ret
}

# Try to mount specified device (by path, by UUID or by label) and check
# the path with 'test'.
#
# example:
# test_dev -f LABEL=&quot;nice label&quot; /some/file1
test_dev() {
    local test_op=$1; local dev=&quot;$2&quot;; local f=&quot;$3&quot;
    local ret=1; local mount_point=$(mkuniqdir /mnt testdev)
    local path

    [ -n &quot;$dev&quot; -a -n &quot;$*&quot; ] || return 1
    [ -d &quot;$mount_point&quot; ] || die 'Mount point does not exist!'

    if mount -r &quot;$dev&quot; &quot;$mount_point&quot; &gt;/dev/null 2&gt;&amp;1; then
        test $test_op &quot;${mount_point}/${f}&quot;
        ret=$?
        umount &quot;$mount_point&quot;
    fi

    rmdir &quot;$mount_point&quot;

    return $ret
}

# match_dev devpattern dev
#
# Returns true if 'dev' matches 'devpattern'.  Both 'devpattern' and 'dev' are
# expanded to kernel names and then compared.  If name of 'dev' is on list of
# names of devices matching 'devpattern', the test is positive.  'dev' and
# 'devpattern' may be anything which function 'devnames' recognizes.
#
# If 'devpattern' is empty or '*' then function just returns true.
#
# Example:
#   match_dev UUID=123 /dev/dm-1
# Returns true if /dev/dm-1 UUID starts with &quot;123&quot;.
match_dev() {
    [ -z &quot;$1&quot; -o &quot;$1&quot; = '*' ] &amp;&amp; return 0
    local devlist; local dev

    devlist=&quot;$(devnames &quot;$1&quot;)&quot; || return 255
    dev=&quot;$(devnames &quot;$2&quot;)&quot; || return 255

    strstr &quot;
$devlist
&quot; &quot;
$dev
&quot;
}

# getkey keysfile for_dev
#
# Reads file &lt;keysfile&gt; produced by probe-keydev and looks for first line to
# which device &lt;for_dev&gt; matches.  The successful result is printed in format
# &quot;&lt;keydev&gt;:&lt;keypath&gt;&quot;.  When nothing found, just false is returned.
#
# Example:
#   getkey /tmp/luks.keys /dev/sdb1
# May print:
#   /dev/sdc1:/keys/some.key
getkey() {
    local keys_file=&quot;$1&quot;; local for_dev=&quot;$2&quot;
    local luks_dev; local key_dev; local key_path

    [ -z &quot;$keys_file&quot; -o -z &quot;$for_dev&quot; ] &amp;&amp; die 'getkey: wrong usage!'
    [ -f &quot;$keys_file&quot; ] || return 1

    local IFS=:
    while read luks_dev key_dev key_path || [ -n &quot;$luks_dev&quot; ]; do
        if match_dev &quot;$luks_dev&quot; &quot;$for_dev&quot;; then
            echo &quot;${key_dev}:${key_path}&quot;
            return 0
        fi
    done &lt; &quot;$keys_file&quot;

    return 1
}

# readkey keypath keydev device
#
# Mounts &lt;keydev&gt;, reads key from file &lt;keypath&gt;, optionally processes it (e.g.
# if encrypted with GPG) and prints to standard output which is supposed to be
# read by cryptsetup.  &lt;device&gt; is just passed to helper function for
# informational purpose.
readkey() {
    local keypath=&quot;$1&quot;
    local keydev=&quot;$2&quot;
    local device=&quot;$3&quot;

    # No mounting needed if the keyfile resides inside the initrd
    if [ &quot;/&quot; == &quot;$keydev&quot; ]; then
        local mntp=/
    else
        # This creates a unique single mountpoint for *, or several for explicitly
        # given LUKS devices. It accomplishes unlocking multiple LUKS devices with
        # a single password entry.
        local mntp=&quot;/mnt/$(str_replace &quot;keydev-$keydev-$keypath&quot; '/' '-')&quot;

        if [ ! -d &quot;$mntp&quot; ]; then
            mkdir &quot;$mntp&quot;
            mount -r &quot;$keydev&quot; &quot;$mntp&quot; || die 'Mounting rem. dev. failed!'
        fi
    fi

    case &quot;${keypath##*.}&quot; in
        gpg)
            if [ -f /lib/dracut-crypt-gpg-lib.sh ]; then
                . /lib/dracut-crypt-gpg-lib.sh
                gpg_decrypt &quot;$mntp&quot; &quot;$keypath&quot; &quot;$keydev&quot; &quot;$device&quot;
            else
                die &quot;No GPG support to decrypt '$keypath' on '$keydev'.&quot;
            fi
            ;;
        img)
            if [ -f /lib/dracut-crypt-loop-lib.sh ]; then
                . /lib/dracut-crypt-loop-lib.sh
                loop_decrypt &quot;$mntp&quot; &quot;$keypath&quot; &quot;$keydev&quot; &quot;$device&quot;
                printf &quot;%s\n&quot; &quot;umount \&quot;$mntp\&quot;; rmdir \&quot;$mntp\&quot;;&quot; &gt; ${hookdir}/cleanup/&quot;crypt-loop-cleanup-99-${mntp##*/}&quot;.sh
                return 0
            else
                die &quot;No loop file support to decrypt '$keypath' on '$keydev'.&quot;
            fi
            ;;
        *) cat &quot;$mntp/$keypath&quot; ;;
    esac

    # No unmounting if the keyfile resides inside the initrd
    if [ &quot;/&quot; != &quot;$keydev&quot; ]; then
        # General unmounting mechanism, modules doing custom cleanup should return earlier
        # and install a pre-pivot cleanup hook
        umount &quot;$mntp&quot;
        rmdir &quot;$mntp&quot;
    fi
}
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2F%2Flib%2Fdracut%2Fmodules.d%2F90crypt'>⬅ Back to Directory</a>