···

       
36
       
36
       
 
       
          ${optionalString (header != null) "--header=${header}"} \

     

       
37
       
37
       
 
       
          ${optionalString (keyFile != null) "--key-file=${keyFile} ${optionalString (keyFileSize != null) "--keyfile-size=${toString keyFileSize}"}"} \

     

       
38
       
38
       
 
       
          > /.luksopen_args

     

       
39
       
39
       
-
       
        get_password "Enter LUKS Passphrase" cryptsetup-askpass

     

       
39
       
39
       
+
       
        cryptsetup-askpass

     

       
40
       
40
       
 
       
        rm /.luksopen_args

     

       
41
       
41
       
 
       
    }

     

       
42
       
42
       
 
       


     
···

       
78
       
78
       
 
       
        for try in $(seq 3); do

     

       
79
       
79
       
 
       


     

       
80
       
80
       
 
       
            ${optionalString yubikey.twoFactor ''

     

       
81
       
81
       
-
       
            k_user="$(get_password "Enter two-factor passphrase" cat)"

     

       
81
       
81
       
+
       
            echo -n "Enter two-factor passphrase: "

     

       
82
       
82
       
+
       
            read -s k_user

     

       
83
       
83
       
+
       
            echo

     

       
82
       
84
       
 
       
            ''}

     

       
83
       
85
       
 
       


     

       
84
       
86
       
 
       
            if [ ! -z "$k_user" ]; then

     
···

       
459
       
461
       
 
       
        $out/bin/ykinfo -V

     

       
460
       
462
       
 
       
        $out/bin/openssl-wrap version

     

       
461
       
463
       
 
       
      ''}

     

       
462
       
462
       
-
       
    '';

     

       
463
       
463
       
-
       


     

       
464
       
464
       
-
       
    boot.initrd.preDeviceCommands = ''

     

       
465
       
465
       
-
       
      get_password() {

     

       
466
       
466
       
-
       
        local ret

     

       
467
       
467
       
-
       
        local reply

     

       
468
       
468
       
-
       
        local tty_stat

     

       
469
       
469
       
-
       


     

       
470
       
470
       
-
       
        tty_stat="$(stty -g)"

     

       
471
       
471
       
-
       
        stty -echo

     

       
472
       
472
       
-
       
        for i in `seq 1 3`; do

     

       
473
       
473
       
-
       
          echo -n "$1: "

     

       
474
       
474
       
-
       
          read reply

     

       
475
       
475
       
-
       
          echo "$reply" | "$2"

     

       
476
       
476
       
-
       
          if [ "$?" = "0" ]; then

     

       
477
       
477
       
-
       
            break

     

       
478
       
478
       
-
       
          fi

     

       
479
       
479
       
-
       
        done

     

       
480
       
480
       
-
       
        stty "$tty_stat"

     

       
481
       
481
       
-
       
      }

     

       
482
       
464
       
 
       
    '';

     

       
483
       
465
       
 
       


     

       
484
       
466
       
 
       
    boot.initrd.preLVMCommands = concatStrings (mapAttrsToList openCommand preLVM);

     

···

       
14
       
14
       
 
       
fail() {

     

       
15
       
15
       
 
       
    if [ -n "$panicOnFail" ]; then exit 1; fi

     

       
16
       
16
       
 
       


     

       
17
       
17
       
-
       
    # If we have a splash screen started, quit it.

     

       
18
       
18
       
-
       
    command -v plymouth >/dev/null 2>&1 && plymouth quit

     

       
19
       
19
       
-
       


     

       
20
       
17
       
 
       
    # If starting stage 2 failed, allow the user to repair the problem

     

       
21
       
18
       
 
       
    # in an interactive shell.

     

       
22
       
19
       
 
       
    cat <<EOF