-
Notifications
You must be signed in to change notification settings - Fork 623
Linux Key Escrow - Agent #23771
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Linux Key Escrow - Agent #23771
Changes from all commits
Commits
Show all changes
53 commits
Select commit
Hold shift + click to select a range
6403e56
run zenity with args
mostlikelee 8e115a6
implement errs
mostlikelee 8dc7d2f
implement Show Info
mostlikelee ea8032c
add linux build flags
mostlikelee 5c4ce48
Handbook: fix broken link (#23043)
mikermcneil 94c5d28
return 0 exit code on nil
mostlikelee 11bb407
fix quoted string args
mostlikelee b7d3955
add logging
mostlikelee f5c5b9a
fix arg formatting
mostlikelee b6d3634
fix again
mostlikelee 0758695
fix tests
mostlikelee b032e42
fix output
mostlikelee 624a9b0
use execuser in zenity
mostlikelee 6f5a519
abstract to dialog
mostlikelee ff887da
trim newline from zenity output
mostlikelee 48448f2
add progress dialog
mostlikelee 1ff8ccc
fix arg order return nil on context cancel
mostlikelee e5f76c4
cleanup Show Progress interface
mostlikelee ff699e8
return -1 on non ExitError
mostlikelee 9206678
fix ineffectual assign
mostlikelee 0697065
Handbook: fix broken link (#23043)
mikermcneil 4d29872
Handbook: fix broken link (#23043)
mikermcneil 1a4c8b0
Handbook: fix broken link (#23043)
mikermcneil 9af5958
lvm package
mostlikelee 133ca83
luks tool
mostlikelee 7ef0ea4
add zenity to tool
mostlikelee be3e19c
add zenity retries
mostlikelee 7d6a621
add re entry prompt
mostlikelee d140d4d
luks runner
mostlikelee 3205ed1
add config runner
mostlikelee 344a828
go-blockdevice implementation
mostlikelee 9b57ea9
move tool
mostlikelee b951f88
add keyslot retries
mostlikelee 5911b79
use zenity
mostlikelee 21fd2d3
escrow correct passphrase
mostlikelee 86dcac4
cleanup
mostlikelee 595a572
send errs in luks response
mostlikelee 07dbb5f
generate 35 len passphrase
mostlikelee 7af58ec
changelog
mostlikelee 894fe09
lint fix
mostlikelee 59c4f52
post key
mostlikelee 0d02e81
cleanup
mostlikelee bd9b8e3
add salt and keyslot
mostlikelee 1cdd864
add progress prompt
mostlikelee 5f9e61b
revert
mostlikelee 4d1ff60
correct changelog
mostlikelee a140682
review comments
mostlikelee a0967f7
address gosec errs
mostlikelee e798fbc
cleanup
mostlikelee 194fecc
Merge branch 'main' into 23586-agent-escrow
mostlikelee 7ca442b
address comments, remove progress prompts
mostlikelee 86408b1
lint - remove progress prompt
mostlikelee 67cc7c4
fix keyphrase validation
mostlikelee File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Binary file not shown.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| * added functionality to support linux disk encryption key escrow including end user prompts and LUKS key management |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,37 @@ | ||
| package luks | ||
|
|
||
| import ( | ||
| "github.com/fleetdm/fleet/v4/orbit/pkg/dialog" | ||
| ) | ||
|
|
||
| type KeyEscrower interface { | ||
| SendLinuxKeyEscrowResponse(LuksResponse) error | ||
| } | ||
|
|
||
| type LuksRunner struct { | ||
| escrower KeyEscrower | ||
| notifier dialog.Dialog | ||
| } | ||
|
|
||
| type LuksResponse struct { | ||
| // Passphrase is a newly created passphrase generated by fleetd for securing the LUKS volume. | ||
| // This passphrase will be securely escrowed to the server. | ||
| Passphrase string | ||
|
|
||
| // KeySlot specifies the LUKS key slot where this new passphrase was created. | ||
| // It is currently not used, but may be useful in the future for passphrase rotation. | ||
| KeySlot *uint | ||
|
|
||
| // Salt is the salt used to generate the LUKS key. | ||
| Salt string | ||
|
|
||
| // Err is the error message that occurred during the escrow process. | ||
| Err string | ||
| } | ||
|
|
||
| func New(escrower KeyEscrower, notifier dialog.Dialog) *LuksRunner { | ||
| return &LuksRunner{ | ||
| escrower: escrower, | ||
| notifier: notifier, | ||
| } | ||
| } | ||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.