Comment 14 for bug 1780332

Revision history for this message
James Page (james-page) wrote :

Dimitri

vaultlocker is a helper tool for managing dmcrypt/LUKS keys in Vault.

vaultlocker provides commands to format a block devices using an encryption key, and to unlock a block device previously encrypted by vaultlocker (along with some systemd unit configurations to perform this action on reboots).

Currently vaultlocker performs targetted rescan and settle udevadm operations post luksFormat to wait for appropriate /dev entries to be created; I consider this a workaround as it would be generally nicer if this was actually performed as part of the luksFormat operation in cryptsetup - once the format operation completes, block devices would be ready for use without any need to udevadm trigger/settle in other tooling.