From 8481a4b3bd7bc41e2d7b3811d27226beae86ba73 Mon Sep 17 00:00:00 2001
From: Michael Chang <mchang@suse.com>
Date: Tue, 14 Jun 2022 17:10:01 +0800
Subject: [PATCH 135/272] templates: import /etc/crypttab to grub.cfg

The /etc/crypptab is used to setup location of encryption key files during
boot, among other things. It is useful to make use the information by grub to
determine where keys are being looked up.

This script can be used to import relevant /etc/crypptab entry to grub.cfg.

Signed-off-by: Michael Chang <mchang@suse.com>
---
 Makefile.util.def          |  7 ++++++
 util/grub.d/05_crypttab.in | 50 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 57 insertions(+)
 create mode 100644 util/grub.d/05_crypttab.in

diff --git a/Makefile.util.def b/Makefile.util.def
index 82046d34d..4ce15119b 100644
--- a/Makefile.util.def
+++ b/Makefile.util.def
@@ -478,6 +478,13 @@ script = {
   installdir = grubconf;
 };
 
+script = {
+  name = '05_crypttab';
+  common = util/grub.d/05_crypttab.in;
+  installdir = grubconf;
+  condition = COND_HOST_LINUX;
+};
+
 script = {
   name = '10_windows';
   common = util/grub.d/10_windows.in;
diff --git a/util/grub.d/05_crypttab.in b/util/grub.d/05_crypttab.in
new file mode 100644
index 000000000..81e7836b4
--- /dev/null
+++ b/util/grub.d/05_crypttab.in
@@ -0,0 +1,50 @@
+#! /bin/sh
+set -e
+
+# grub-mkconfig helper script.
+# Copyright (C) 2022  Free Software Foundation, Inc.
+#
+# GRUB is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# GRUB is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with GRUB.  If not, see <http://www.gnu.org/licenses/>.
+
+prefix="@prefix@"
+exec_prefix="@exec_prefix@"
+datarootdir="@datarootdir@"
+
+export TEXTDOMAIN=@PACKAGE@
+export TEXTDOMAINDIR="@localedir@"
+
+. "$pkgdatadir/grub-mkconfig_lib"
+
+CRYPTTAB=/etc/crypttab
+
+if [ -r "$CRYPTTAB" ]; then
+  awk '
+      /^\s*#/ || $3 ~ /(^\/dev\/|^\/proc\/|^\/sys\/|:)/ { next }
+      { key[0] = $3 }
+      $3 ~ /(^$|none|-)/ {
+        key[0] = "/etc/cryptsetup-keys.d/" $1 ".key"
+        key[1] = "/run/cryptsetup-keys.d/" $1 ".key"
+      }
+      {
+        for (d in key)
+          if (system("test -f " key[d]) == 0)
+            next
+      }
+      /UUID=/ {
+          sub(/UUID=/,"",$2);
+          gsub(/-/,"",$2);
+          printf("crypttab_entry %s %s %s\n",$1,$2,$3)
+      }
+  ' "$CRYPTTAB"
+fi
-- 
2.41.0