XaiJu
bcachefs
bcachefs

patreon


Initramfs support for root on encrypted bcachefs

I just pushed initrams hooks/scripts for handling a bcachefs encrypted root filesystem - after you make install in bcachefs-tools, they'll be picked up next time you generate an initramfs, and if your root filesystem is encrypted you'll be promted for the passphrase to unlock it when booting up.

I've only tested it on debian. It could also be prettier, too - patches welcome.

Comments

It's a clean slate design: <a href="https://bcachefs.org/Encryption/" rel="nofollow noopener" target="_blank">https://bcachefs.org/Encryption/</a>

Kent Overstreet

What is that based on ? Encfs ?

veritanuda

That's a good point. Want to submit a patch?

Kent Overstreet

Are you referring to this commit <a href="https://evilpiepirate.org/git/bcachefs-tools.git/commit/initramfs?id=813862a47ca866082ca3002441df6c13b47f1b0d" rel="nofollow noopener" target="_blank">https://evilpiepirate.org/git/bcachefs-tools.git/commit/initramfs?id=813862a47ca866082ca3002441df6c13b47f1b0d</a> ? I notice that you're doing an infinite loop until successful there. Most of initramfs limits the amount of retries to make sure that, after some (or a lot of) time, you can get a root shell to fix any problems. You're unconditional infinite loop (apparently) breaks that.

:D

Have been for awhile...

Kent Overstreet

Does this mean you are starting to lay the groundwork for upstreaming bcachefs?

wow, badass!

Native bcachefs encryption

Kent Overstreet

Encrypted LUKS or native bcachefs encryption?


More Creators