Current File : //lib/python2.7/site-packages/salt/states/cryptdev.pyc
�
���^c @@ sn d Z d d l m Z m Z m Z d d l Z e j e � Z d d d e
e d d � Z d e
e d � Z
d S( u�
Opening of Encrypted Devices
=======================
Ensure that an encrypted device is mapped with the `mapped` function:
.. code-block:: yaml
mappedname:
cryptdev.mapped:
- device: /dev/sdb1
- keyfile: /etc/keyfile.key
- opts:
- size=256
swap:
crypted.mapped:
- device: /dev/sdx4
- keyfile: /dev/urandom
- opts: swap,cipher=aes-cbc-essiv:sha256,size=256
mappedbyuuid:
crypted.mapped:
- device: UUID=066e0200-2867-4ebe-b9e6-f30026ca2314
- keyfile: /etc/keyfile.key
- config: /etc/alternate-crypttab
.. versionadded:: 2018.3.0
i ( t absolute_importt print_functiont unicode_literalsNu
/etc/crypttabu namec C@ s� i | d 6i d 6t d 6d d 6} | rH | rH t | d <d | d <| S| r� | d k sr | d k sr | d k r� t | d <d | d d
<n� | r4t d � } | | j � k r4| r� t j d � n t d
r� d | d <d | d <q1t d | | | � }
|
rd | d d
<q1d | d d
<t | d <q4n | r�t d
r�t d | | d | d | d | d | �} | r�| d k r�d j | � | d d <n | d k r�d j | � | d d <q�q�d j | � | d d <t | d <n | S( uk
Verify that a device is mapped
name
The name under which the device is to be mapped
device
The device name, typically the device node, such as ``/dev/sdb1``
or ``UUID=066e0200-2867-4ebe-b9e6-f30026ca2314``.
keyfile
Either ``None`` if the password is to be entered manually on boot, or
an absolute path to a keyfile. If the password is to be asked
interactively, the mapping cannot be performed with ``immediate=True``.
opts
A list object of options or a comma delimited list
config
Set an alternative location for the crypttab, if the map is persistent,
Default is ``/etc/crypttab``
persist
Set if the map should be saved in the crypttab, Default is ``True``
immediate
Set if the device mapping should be executed immediately. Requires that
the keyfile not be ``None``, because the password cannot be asked
interactively. Note that options are not passed through on the initial
mapping. Default is ``False``.
match_on
A name or list of crypttab properties on which this state should be applied.
Default is ``name``, meaning that the line is matched only by the name
parameter. If the desired configuration requires two devices mapped to
the same name, supply a list of parameters to match on.
u nameu changesu resultu u commentuJ Either persist or immediate must be set, otherwise this state does nothingu noneu -u5 Device cannot be mapped immediately without a keyfileu
cryptsetupu cryptdev.activeu6 Ignore cryptdev configuration when mapping immediatelyu testu" Device would be mapped immediatelyu commmentu
cryptdev.openu Device mapped using cryptsetupu% Device failed to map using cryptsetupu cryptdev.set_crypttabt passwordt optionst configt match_onu newu Entry added in {0}u crypttabu changeu Existing entry in {0} changedu Unable to set entry in {0}N( t Truet Falset Nonet __salt__t keyst logt warningt __opts__t format( t namet devicet keyfilet optsR t persistt immediateR t rett activet cryptsetup_resultt crypttab_result( ( s8 /usr/lib/python2.7/site-packages/salt/states/cryptdev.pyt mapped% sN -
*
c C@ s+ i | d 6i d 6t d 6d d 6} | r� t d � } | | j � k r� t d rh d | d <d | d <q� t d
| � } | r� d | d d <q� d
| d d <t | d <q� n | r't d r't d | d | �} | r| d k r$d j | � | d d <q$q'd j | � | d d <t | d <n | S( u�
Ensure that a device is unmapped
name
The name to ensure is not mapped
config
Set an alternative location for the crypttab, if the map is persistent,
Default is ``/etc/crypttab``
persist
Set if the map should be removed from the crypttab. Default is ``True``
immediate
Set if the device should be unmapped immediately. Default is ``False``.
u nameu changesu resultu u commentu cryptdev.activeu testu$ Device would be unmapped immediatelyu commmentu cryptdev.closeu Device unmapped using cryptsetupu
cryptsetupu' Device failed to unmap using cryptsetupu cryptdev.rm_crypttabR u changeu Entry removed from {0}u crypttabu Unable to remove entry in {0}N( R R
R R R R R ( R R R R R R R R ( ( s8 /usr/lib/python2.7/site-packages/salt/states/cryptdev.pyt unmapped� s.
( t __doc__t
__future__R R R t loggingt getLoggert __name__R R R R R R ( ( ( s8 /usr/lib/python2.7/site-packages/salt/states/cryptdev.pyt <module> s ^
Mini Shell