This commit is contained in:
Marc Beninca 2024-11-12 23:36:20 +01:00
parent c4f68fc29b
commit b557ddde70
Signed by: marc.beninca
GPG key ID: 9C7613450C80C24F
2 changed files with 4 additions and 52 deletions

View file

@ -105,19 +105,7 @@ rescue_wipe_0_init_hetzner_8_8() {
--uuid "00000000:00000000:00000000:00000001" \
"${members[@]}"
# encrypt
echo "${passphrase}" |
cryptsetup \
--verbose \
--batch-mode \
--type "luks2" \
--pbkdf "argon2id" \
--cipher "aes-xts-plain64" \
--iter-time 8192 \
--key-size 512 \
--hash "sha512" \
--use-random \
luksFormat \
"/dev/md/crypt"
luks_format "${passphrase}" "/dev/md/crypt"
# open
echo "${passphrase}" |
cryptsetup luksOpen "/dev/md/crypt" "crypt"
@ -132,19 +120,7 @@ rescue_wipe_2_make_hetzner_8_8() {
# read passphrase
passphrase="$(read_passphrase)"
# encrypt
echo "${passphrase}" |
cryptsetup \
--verbose \
--batch-mode \
--type "luks2" \
--pbkdf "argon2id" \
--cipher "aes-xts-plain64" \
--iter-time 8192 \
--key-size 512 \
--hash "sha512" \
--use-random \
luksFormat \
"/dev/md/crypt"
luks_format "${passphrase}" "/dev/md/crypt"
# open
echo "${passphrase}" |
cryptsetup luksOpen "/dev/md/crypt" "crypt"

View file

@ -38,19 +38,7 @@ rescue_wipe_0_init_ovh_vle2() {
# crypt / wipe
fs_wipe "${device}1" "1G" 1
# crypt / encrypt
echo "${passphrase}" |
cryptsetup \
--verbose \
--batch-mode \
--type "luks2" \
--pbkdf "argon2id" \
--cipher "aes-xts-plain64" \
--iter-time 4096 \
--key-size 512 \
--hash "sha512" \
--use-random \
luksFormat \
"${device}1"
luks_format "${passphrase}" "${device}1"
# crypt / open
echo "${passphrase}" |
cryptsetup luksOpen "${device}1" "crypt"
@ -66,19 +54,7 @@ rescue_wipe_2_make_ovh_vle2() {
# read passphrase
passphrase="$(read_passphrase)"
# crypt / encrypt
echo "${passphrase}" |
cryptsetup \
--verbose \
--batch-mode \
--type "luks2" \
--pbkdf "argon2id" \
--cipher "aes-xts-plain64" \
--iter-time 4096 \
--key-size 512 \
--hash "sha512" \
--use-random \
luksFormat \
"${device}1"
luks_format "${passphrase}" "${device}1"
# crypt / open
echo "${passphrase}" |
cryptsetup luksOpen "${device}1" "crypt"