mirror of
https://github.com/aljazceru/kata-containers.git
synced 2026-01-07 08:24:23 +01:00
a5dd0cd3ab
The init.sh in initramfs will parse the verity scheme, roothash, root device and setup the root device accordingly. Fixes: #5135 Signed-off-by: Wang, Arron <arron.wang@intel.com>
45 lines
1.1 KiB
Bash
Executable File
45 lines
1.1 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# Copyright (c) 2022 Intel
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
[ -d /dev ] || mkdir -m 0755 /dev
|
|
[ -d /root ] || mkdir -m 0700 /root
|
|
[ -d /sys ] || mkdir /sys
|
|
[ -d /proc ] || mkdir /proc
|
|
[ -d /mnt ] || mkdir /mnt
|
|
[ -d /tmp ] || mkdir /tmp
|
|
|
|
mount -t sysfs -o nodev,noexec,nosuid sysfs /sys
|
|
mount -t proc -o nodev,noexec,nosuid proc /proc
|
|
|
|
echo "/sbin/mdev" > /proc/sys/kernel/hotplug
|
|
mdev -s
|
|
|
|
get_option() {
|
|
local value
|
|
value=" $(cat /proc/cmdline) "
|
|
value="${value##* ${1}=}"
|
|
value="${value%% *}"
|
|
[ "${value}" != "" ] && echo "${value}"
|
|
}
|
|
|
|
rootfs_verifier=$(get_option cc_rootfs_verity.scheme)
|
|
rootfs_hash=$(get_option cc_rootfs_verity.hash)
|
|
root_device=$(get_option root)
|
|
hash_device=${root_device%?}2
|
|
|
|
if [ -e ${root_device} ] && [ -e ${hash_device} ] && [ "${rootfs_verifier}" = "dm-verity" ]
|
|
then
|
|
veritysetup open "${root_device}" root "${hash_device}" "${rootfs_hash}"
|
|
mount /dev/mapper/root /mnt
|
|
else
|
|
echo "No LUKS device found"
|
|
mount "${root_device}" /mnt
|
|
fi
|
|
|
|
umount /proc
|
|
umount /sys
|
|
exec switch_root /mnt /sbin/init
|