Skip to content

Commit

Permalink
schema: add missing properties
Browse files Browse the repository at this point in the history
- TPM FDE encryption method.
- Read only for Btrfs.
  • Loading branch information
joseivanlopez committed Oct 18, 2024
1 parent 627f213 commit ee02139
Show file tree
Hide file tree
Showing 2 changed files with 77 additions and 0 deletions.
53 changes: 53 additions & 0 deletions rust/agama-lib/share/examples/storage/encryption.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
{
"storage": {
"drives": [
{
"encryption": {
"luks1": {
"password": "12345",
"cipher": "aes-xts-plain64",
"keySize": 512
}
}
},
{
"partitions": [
{
"encryption": {
"luks2": {
"password": "12345",
"cipher": "aes-xts-plain64",
"keySize": 512,
"pbkdFunction": "argon2i",
"label": "data"
}
}
},
{
"encryption": {
"pervasiveLuks2": {
"password": "12345"
}
}
},
{
"encryption": {
"tpmFde": {
"password": "12345"
}
}
},
{
"encryption": "protected_swap"
},
{
"encryption": "secure_swap"
},
{
"encryption": "random_swap"
}
]
}
]
}
}
24 changes: 24 additions & 0 deletions rust/agama-lib/share/profile.schema.json
Original file line number Diff line number Diff line change
Expand Up @@ -1180,6 +1180,24 @@
}
}
},
"encryptionTPM": {
"title": "TPM-Based Full Disk Encrytion",
"type": "object",
"additionalProperties": false,
"required": ["tpmFde"],
"properties": {
"tpmFde": {
"type": "object",
"additionalProperties": false,
"required": ["password"],
"properties": {
"password": {
"$ref": "#/$defs/encryptionPassword"
}
}
}
}
},
"encryptionSwap": {
"title": "Swap encryptions",
"enum": ["protected_swap", "secure_swap", "random_swap"]
Expand All @@ -1189,6 +1207,7 @@
{ "$ref": "#/$defs/encryptionLUKS1" },
{ "$ref": "#/$defs/encryptionLUKS2" },
{ "$ref": "#/$defs/encryptionPervasiveLUKS2" },
{ "$ref": "#/$defs/encryptionTPM" },
{ "$ref": "#/$defs/encryptionSwap" }
]
},
Expand Down Expand Up @@ -1229,6 +1248,11 @@
"title": "Btrfs snapshots",
"description": "Whether to configrue Btrfs snapshots.",
"type": "boolean"
},
"readOnly": {
"title": "Btrfs read only",
"description": "Whether to configrue Btrfs as read only.",
"type": "boolean"
}
}
}
Expand Down

0 comments on commit ee02139

Please sign in to comment.