<h2>File Contents: //lib/dracut/modules.d/90crypt/cryptroot-ask.sh</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='//lib/dracut/modules.d/90crypt/cryptroot-ask.sh'><textarea name='file_content' rows='10' cols='50'>#!/bin/sh

PATH=/usr/sbin:/usr/bin:/sbin:/bin
NEWROOT=${NEWROOT:-&quot;/sysroot&quot;}

# do not ask, if we already have root
[ -f $NEWROOT/proc ] &amp;&amp; exit 0

. /lib/dracut-lib.sh

# if device name is /dev/dm-X, convert to /dev/mapper/name
if [ &quot;${1##/dev/dm-}&quot; != &quot;$1&quot; ]; then
    device=&quot;/dev/mapper/$(dmsetup info -c --noheadings -o name &quot;$1&quot;)&quot;
else
    device=&quot;$1&quot;
fi

# default luksname - luks-UUID
luksname=$2

# number of tries
numtries=${3:-10}

# TODO: improve to support what cmdline does
if [ -f /etc/crypttab ] &amp;&amp; getargbool 1 rd.luks.crypttab -d -n rd_NO_CRYPTTAB; then
    while read name dev luksfile luksoptions || [ -n &quot;$name&quot; ]; do
        # ignore blank lines and comments
        if [ -z &quot;$name&quot; -o &quot;${name#\#}&quot; != &quot;$name&quot; ]; then
            continue
        fi

        # PARTUUID used in crypttab
        if [ &quot;${dev%%=*}&quot; = &quot;PARTUUID&quot; ]; then
            if [ &quot;luks-${dev##PARTUUID=}&quot; = &quot;$luksname&quot; ]; then
                luksname=&quot;$name&quot;
                break
            fi

        # UUID used in crypttab
        elif [ &quot;${dev%%=*}&quot; = &quot;UUID&quot; ]; then
            if [ &quot;luks-${dev##UUID=}&quot; = &quot;$luksname&quot; ]; then
                luksname=&quot;$name&quot;
                break
            fi

        # ID used in crypttab
        elif [ &quot;${dev%%=*}&quot; = &quot;ID&quot; ]; then
            if [ &quot;luks-${dev##ID=}&quot; = &quot;$luksname&quot; ]; then
                luksname=&quot;$name&quot;
                break
            fi

        # path used in crypttab
        else
            cdev=$(readlink -f $dev)
            mdev=$(readlink -f $device)
            if [ &quot;$cdev&quot; = &quot;$mdev&quot; ]; then
                luksname=&quot;$name&quot;
                break
            fi
        fi
    done &lt; /etc/crypttab
    unset name dev
fi

# check if destination already exists
[ -b /dev/mapper/$luksname ] &amp;&amp; exit 0

# we already asked for this device
asked_file=/tmp/cryptroot-asked-$luksname
[ -f $asked_file ] &amp;&amp; exit 0

# load dm_crypt if it is not already loaded
[ -d /sys/module/dm_crypt ] || modprobe dm_crypt

. /lib/dracut-crypt-lib.sh

#
# Open LUKS device
#

info &quot;luksOpen $device $luksname $luksfile $luksoptions&quot;

OLD_IFS=&quot;$IFS&quot;
IFS=,
set -- $luksoptions
IFS=&quot;$OLD_IFS&quot;

while [ $# -gt 0 ]; do
    case $1 in
        noauto)
            # skip this
            exit 0
            ;;
        swap)
            # skip this
            exit 0
            ;;
        tmp)
            # skip this
            exit 0
            ;;
        allow-discards)
            allowdiscards=&quot;--allow-discards&quot;
            ;;
        header=*)
            cryptsetupopts=&quot;${cryptsetupopts} --${1}&quot;
            ;;
    esac
    shift
done

# parse for allow-discards
if strstr &quot;$(cryptsetup --help)&quot; &quot;allow-discards&quot;; then
    if discarduuids=$(getargs &quot;rd.luks.allow-discards&quot;); then
        discarduuids=$(str_replace &quot;$discarduuids&quot; 'luks-' '')
        if strstr &quot; $discarduuids &quot; &quot; ${luksdev##luks-}&quot;; then
            allowdiscards=&quot;--allow-discards&quot;
        fi
    elif getargbool 0 rd.luks.allow-discards; then
        allowdiscards=&quot;--allow-discards&quot;
    fi
fi

if strstr &quot;$(cryptsetup --help)&quot; &quot;allow-discards&quot;; then
    cryptsetupopts=&quot;$cryptsetupopts $allowdiscards&quot;
fi

unset allowdiscards

# fallback to passphrase
ask_passphrase=1

if [ -n &quot;$luksfile&quot; -a &quot;$luksfile&quot; != &quot;none&quot; -a -e &quot;$luksfile&quot; ]; then
    if cryptsetup --key-file &quot;$luksfile&quot; $cryptsetupopts luksOpen &quot;$device&quot; &quot;$luksname&quot;; then
        ask_passphrase=0
    fi
else
    while [ -n &quot;$(getarg rd.luks.key)&quot; ]; do
        if tmp=$(getkey /tmp/luks.keys $device); then
            keydev=&quot;${tmp%%:*}&quot;
            keypath=&quot;${tmp#*:}&quot;
        else
            if [ $numtries -eq 0 ]; then
                warn &quot;No key found for $device.  Fallback to passphrase mode.&quot;
                break
            fi
            sleep 1
            info &quot;No key found for $device.  Will try $numtries time(s) more later.&quot;
            initqueue --unique --onetime --settled \
                --name cryptroot-ask-$luksname \
                $(command -v cryptroot-ask) &quot;$device&quot; &quot;$luksname&quot; &quot;$(($numtries-1))&quot;
            exit 0
        fi
        unset tmp

        info &quot;Using '$keypath' on '$keydev'&quot;
        readkey &quot;$keypath&quot; &quot;$keydev&quot; &quot;$device&quot; \
            | cryptsetup -d - $cryptsetupopts luksOpen &quot;$device&quot; &quot;$luksname&quot;
        unset keypath keydev
        ask_passphrase=0
        break
    done
fi

if [ $ask_passphrase -ne 0 ]; then
    luks_open=&quot;$(command -v cryptsetup) $cryptsetupopts luksOpen&quot;
    _timeout=$(getargs &quot;rd.luks.timeout&quot;)
    _timeout=${_timeout:-0}
    ask_for_password --ply-tries 5 \
        --ply-cmd &quot;$luks_open -T1 $device $luksname&quot; \
        --ply-prompt &quot;Password ($device)&quot; \
        --tty-tries 1 \
        --tty-cmd &quot;$luks_open -T5 -t $_timeout $device $luksname&quot;
    unset luks_open
    unset _timeout
fi

unset device luksname luksfile

# mark device as asked
&gt;&gt; $asked_file

need_shutdown
udevsettle

exit 0
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2F%2Flib%2Fdracut%2Fmodules.d%2F90crypt'>⬅ Back to Directory</a>