[v4,0/5] initramfs-crypt-hook patch

Message

Claudius Heine March 5, 2025, noon UTC

Hi,

here is v4 of my patchset.

Changes from v3:
 - improve documentation and commit messages
 - reorder commits, to put re-encryption recovery up front
 - extract static temporary encryption key patch into its own
 - switch from lsblk to blkid

Changes from v2:
 - Rebase on current next
 - Extended `noencrypt` documentation
 - support clevis tokens for re-encryption recovery

Changes from v1:
 - Added more descriptive commit message
 - Added more descriptive documentation about noencrypt option
 - Fixed typos in documentation
 - removed unecessary setting of /conf/param.conf in initramfs-crypt-hook
 - added re-encryption recovery patch

---
Claudius Heine (5):
      initramfs-crypt-hook: make sure that mount path exists
      initramfs-crypt-hook: use static temporary encryption key
      initramfs-crypt-hook: add re-encryption recovery
      initramfs-crypt-hook: implement 'noencrypt' option
      initramfs-crypt-hook: add 'format-if-empty' feature

 doc/README.tpm2.encryption.md                      | 25 +++++++-
 .../files/local-bottom-complete                    |  1 +
 .../initramfs-crypt-hook/files/local-top-complete  | 73 ++++++++++++++++++----
 .../initramfs-crypt-hook_0.6.bb                    |  5 +-
 4 files changed, 89 insertions(+), 15 deletions(-)
---
base-commit: 6f702e8af81ca12b9f4b37a0b853f987c35a1405
change-id: 20250305-initramfs-crypt-hook-patches-2-9cc4a027c89a

Best regards,