Re: [9front] Booting with encrypted partitions

[petter9@bissa.eu]

Glad to see some interest! Just to be clear. My goal here was primarily 
just to hack together something that scratches my itch, today.


Thanks for pointing out the flaw with the empty test.  I actually had it 
there before, but it got lost retyping it after reinstalling.  (Yes, my 
process sucks.)


Ori: I did consider briefly to make it work automatically for different 
setups.

Some quick thoughts that put me off:
* What if new crypto programs are introduced. Which one to use.
* What if someone has multiple plan9 installations on the same disk 
and/or several disks.
* Different filesystems may need different partitions decrypted. 
Maintain a list? Update with new filesystems.
* Different filesystems and multiple installations.
* Should one decrypt before or after partition is selected.

Felt a bit like a pandora's box to me.  (Could very well be i'm making 
problems that aren't actually here obviously.  I don't know.)

Having the user specify the decryption command themselves is the 
simplest and cleanest solution i could think of, random unverified 
concerns considered.  Not saying having it in plan9.ini like that is the 
right way to do it.  (But hey, step 1: get something that works;))


Cinap: Regarding having this in the main loop.  The scenario i had in 
mind there was the user aborting the password input (DEL) to type in 
some other partition in bootargs (multi-boot/usb).  And if that fails, 
just start all over again.


I'd be happy to help and experiment the next few days before i set this 
computer to work.  I'll try moving it around.


initcmd?


--
Petter

--
For the record.

diff -r 8f9f3ee2eacf sys/src/9/boot/bootrc
--- a/sys/src/9/boot/bootrc	Mon Nov 11 13:35:47 2019 -0800
+++ b/sys/src/9/boot/bootrc	Tue Nov 12 13:10:09 2019 +0100
@@ -65,6 +65,11 @@
  mt=()
  
  fn main{
+	if(! ~ $#decryptfs 0) {
+		echo $decryptfs
+		eval $decryptfs
+	}
+
  	mp=()
  	while(~ $#mp 0){
  		if(~ $#nobootprompt 0){



---plan9.ini---
decryptfs=disk/cryptsetup -i /dev/sdE0/fsworm /dev/sdE0/fscache 
/dev/sdE0/other
nobootprompt=local!/dev/fs/fscache
mouseport=ps2
monitor=x200
vgasize=1280x800x32
user=p