mirror of
https://github.com/siderolabs/talos.git
synced 2025-08-12 01:27:07 +02:00
58ff2c9808
This PR introduces the first part of disk encryption support. New config section `systemDiskEncryption` was added into MachineConfig. For now it contains only Ephemeral partition encryption. Encryption itself supports two kinds of keys for now: - node id deterministic key. - static key which is hardcoded in the config and mainly used for test purposes. Talosctl cluster create can now be told to encrypt ephemeral partition by using `--encrypt-ephemeral` flag. Additionally: - updated pkgs library version. - changed Dockefile to copy cryptsetup deps from pkgs. Signed-off-by: Artem Chernyshev <artem.0xD2@gmail.com>
23 lines
641 B
Go
23 lines
641 B
Go
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
package keys
|
|
|
|
// StaticKeyHandler just handles the static key value all the time.
|
|
type StaticKeyHandler struct {
|
|
key []byte
|
|
}
|
|
|
|
// NewStaticKeyHandler creates new EphemeralKeyHandler.
|
|
func NewStaticKeyHandler(key []byte) (*StaticKeyHandler, error) {
|
|
return &StaticKeyHandler{
|
|
key: key,
|
|
}, nil
|
|
}
|
|
|
|
// GetKey implements KeyHandler interface.
|
|
func (h *StaticKeyHandler) GetKey(options ...KeyOption) ([]byte, error) {
|
|
return h.key, nil
|
|
}
|