summaryrefslogtreecommitdiffstats
path: root/contrib/initramfs/zfsunlock
blob: f6b6b9dbe14dcccd0e6756b217f74767f2f350bf (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
#!/bin/sh

set -eu
if [ ! -e /run/zfs_fs_name ]; then
	echo "Wait for the root pool to be imported or press Ctrl-C to exit."
fi
while [ ! -e /run/zfs_fs_name ]; do
	if [ -e /run/zfs_unlock_complete ]; then
		exit 0
	fi
	sleep 0.5
done
echo
echo "Unlocking encrypted ZFS filesystems..."
echo "Enter the password or press Ctrl-C to exit."
echo
zfs_fs_name=""
if [ ! -e /run/zfs_unlock_complete_notify ]; then
	mkfifo /run/zfs_unlock_complete_notify
fi
while [ ! -e /run/zfs_unlock_complete ]; do
	zfs_fs_name=$(cat /run/zfs_fs_name)
	zfs_console_askpwd_cmd=$(cat /run/zfs_console_askpwd_cmd)
	systemd-ask-password "Encrypted ZFS password for ${zfs_fs_name}:" | \
		/sbin/zfs load-key "$zfs_fs_name" || true
	if [ "$(/sbin/zfs get -H -ovalue keystatus "$zfs_fs_name" 2> /dev/null)" = "available" ]; then
		echo "Password for $zfs_fs_name accepted."
		zfs_console_askpwd_pid=$(ps | awk '!'"/awk/ && /$zfs_console_askpwd_cmd/ { print \$1; exit }")
		if [ -n "$zfs_console_askpwd_pid" ]; then
			kill "$zfs_console_askpwd_pid"
		fi
		# Wait for another filesystem to unlock.
		while [ "$(cat /run/zfs_fs_name)" = "$zfs_fs_name" ] && [ ! -e /run/zfs_unlock_complete ]; do
			sleep 0.5
		done
	else
		echo "Wrong password.  Try again."
	fi
done
echo "Unlocking complete.  Resuming boot sequence..."
echo "Please reconnect in a while."
echo "ok" > /run/zfs_unlock_complete_notify