Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

tool: correctly update initrd secrets #109

Merged
merged 2 commits into from
Feb 24, 2023

Conversation

nikstur
Copy link
Member

@nikstur nikstur commented Feb 20, 2023

This PR is part of a larger series which is supposed to be merged in order but is broken up into multiple pieces to make review easier. It is supposed to be merged in this order:

#108 -> #107 -> #110 -> (#109)

To correctly overwrite existing initrd with newer secrets (from newer
generations), the links need to be sorted from oldest generation to
newest.

Closes #103
Depends on #110

@nikstur nikstur force-pushed the correctly-update-initrd-secrets branch from ce1db97 to 068f5e1 Compare February 20, 2023 01:19
@nikstur nikstur changed the title Correctly update initrd secrets tool: correctly update initrd secrets Feb 20, 2023
@nikstur nikstur marked this pull request as ready for review February 20, 2023 22:18
@nikstur nikstur requested a review from blitz February 20, 2023 22:18
@blitz
Copy link
Member

blitz commented Feb 20, 2023

@nikstur I don't think this closes #104. :) Can you fix the PR description?

@nikstur
Copy link
Member Author

nikstur commented Feb 20, 2023

Thx, good catch ;)

To correctly overwrite existing initrd with newer secrets (from newer
generations), the links need to be sorted from oldest generation to
newest.
@nikstur nikstur force-pushed the correctly-update-initrd-secrets branch from 068f5e1 to c4c78a9 Compare February 23, 2023 23:36
Copy link
Member

@RaitoBezarius RaitoBezarius left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Add a test for updating the secrets on an existing initrd.
@nikstur nikstur force-pushed the correctly-update-initrd-secrets branch from c4c78a9 to f4f8c41 Compare February 24, 2023 00:16
@nikstur
Copy link
Member Author

nikstur commented Feb 24, 2023

Thanks for the reviews @blitz and @RaitoBezarius. I'm happy that we got these reviewed and merged quickly!

@nikstur nikstur merged commit ed1676e into master Feb 24, 2023
@RaitoBezarius
Copy link
Member

Thanks for the reviews @blitz and @RaitoBezarius. I'm happy that we got these reviewed and merged quickly!

Thank you for your work and patience :)

@nikstur nikstur deleted the correctly-update-initrd-secrets branch February 24, 2023 00:37
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

New boot.initrd.secrets for existing initrd is not written to the ESP
3 participants