fde

Documentation

Overview

package fde implements helper used by low level parts like secboot in snap-bootstrap and high level parts like DeviceManager in snapd.

Note that it must never import anything overlord related itself to avoid increasing the size of snap-bootstrap.

Index

• func HasRevealKey() bool
• type SetupRequest

Functions

func HasRevealKey

func HasRevealKey() bool

HasRevealKey return true if the current system has a "fde-reveal-key" binary (usually used in the initrd).

This will be setup by devicestate to support device-specific full disk encryption implementations.

Types

type SetupRequest

type SetupRequest struct {
	// XXX: make "op" a type: "features", "initial-setup", "update" ?
	Op string `json:"op"`

	Key     *secboot.EncryptionKey `json:"key,omitempty"`
	KeyName string                 `json:"key-name,omitempty"`

	// List of models with their related fields, this will be set
	// to follow the secboot:SnapModel interface.
	Models []map[string]string `json:"models,omitempty"`
}

SetupRequest carries the operation and parameters for the fde-setup hooks made available to them via the snapctl fde-setup-request command.