[elbe-devel] How to create an encrypted rootfs image using Elbe?

[Lukasz Walewski]

>-----Ursprüngliche Nachricht-----
>Von: Manuel Traut [mailto:manuel.traut at linutronix.de]
>Gesendet: Dienstag, 4. Juli 2017 08:14
>An: Lukasz Walewski
>Cc: ElbeDevel_at_Linuxtronix
>Betreff: Re: [elbe-devel] How to create an encrypted rootfs image using
>Elbe?

Hi Manuel,

>Installing cryptsetup etc. into the initvm is already possible by
>providing a customized <initvm> description in XML.

Yes, that solves this part of my problem.

>Currently finetuning runce twice. Once before extracting and once after
>extracting the archive. That should be also controlable.

Hm.. I thought it was the other way round, i.e. that the archive gets extracted twice: once before running the finetuning commands and once after running the finetuning commands - at least that's how my version of elbe (v1.2) reports it in the elbe-report.txt:

...
archive extract before finetuning
...
finetuning log
...
archive extract after finetuning
...

>I think about allowing a list of <finetuning> sections and adding some
>attributes, e.g. <finetuning runafter='imagegen'>. Or sth. like this..

Yes, that would be exactly what would be needed here! This way you would define a sequence of "build steps" and assign commands to those steps. I find the idea promising.

One design comment: I would not mix finetuning commands for different "steps" in one XML section. If you did, you would have ended up with a section with interleaved commands from different steps that implicitly depend on each other and whose order of execution matters! That would be very difficult to read/understand/debug. Instead I would define a separate section for each step. Oh, but that's what you are proposing actually, isn't it?

Best regards,
Lukasz


----------------------------------------

scan Messtechnik GmbH
Brigittagasse 22-24
A-1200 Wien/Vienna
tel. +43 1 219 73 93 - 0
fax +43 1 219 73 93 - 12
http://www.s-can.at
office at s-can.at

Geschaeftsfuehrer/President: DI Andreas Weingartner
Firmenbuchnummer/Incorporation No: FN178880i
Gerichtsstand/Court of Jurisdiction: Wien/Vienna

----------------------------------------

s::can - intelligent, optical, online

i::scan - compact, precise and affordable!
UV254::NTU::FTU::TOC::DOC::COD::BOD::Colour ...and many more to come!
http://www.i-scan.at
----------------------------------------
"YES WE SCAN !"