Adding upstream version 060+5.upstream/060+5

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 73 insertions, 0 deletions

diff --git a/modules.d/91crypt-gpg/module-setup.sh b/modules.d/91crypt-gpg/module-setup.sh
new file mode 100755
index 0000000..501869a
--- /dev/null
+++ b/modules.d/91crypt-gpg/module-setup.sh
@@ -0,0 +1,73 @@
+#!/bin/bash
+
+# GPG support is optional
+# called by dracut
+check() {
+    require_binaries gpg tr || return 1
+
+    if sc_requested; then
+        if ! sc_supported; then
+            dwarning "crypt-gpg: GnuPG >= 2.1 with scdaemon and libusb required for ccid smartcard support"
+            return 1
+        fi
+        return 0
+    fi
+
+    return 255
+}
+
+# called by dracut
+depends() {
+    echo crypt
+}
+
+# called by dracut
+install() {
+    inst_multiple gpg tr
+    inst "$moddir/crypt-gpg-lib.sh" "/lib/dracut-crypt-gpg-lib.sh"
+
+    if sc_requested; then
+        inst_multiple gpg-agent
+        inst_multiple gpg-connect-agent
+        inst_multiple -o /usr/libexec/scdaemon /usr/lib/gnupg/scdaemon
+        cp "$dracutsysrootdir$(sc_public_key)" "${initdir}/root/"
+    fi
+}
+
+sc_public_key() {
+    echo -n "/etc/dracut.conf.d/crypt-public-key.gpg"
+}
+
+# CCID Smartcard support requires GnuPG >= 2.1 with scdaemon and libusb
+sc_supported() {
+    local gpgMajor
+    local gpgMinor
+    local scdaemon
+    gpgMajor="$(gpg --version | sed -n 1p | sed -n -r -e 's|.* ([0-9]*).*|\1|p')"
+    gpgMinor="$(gpg --version | sed -n 1p | sed -n -r -e 's|.* [0-9]*\.([0-9]*).*|\1|p')"
+
+    if [[ -x "$dracutsysrootdir"/usr/libexec/scdaemon ]]; then
+        scdaemon=/usr/libexec/scdaemon
+    elif [[ -x "$dracutsysrootdir"/usr/lib/gnupg/scdaemon ]]; then
+        scdaemon=/usr/lib/gnupg/scdaemon
+    else
+        return 1
+    fi
+
+    if [[ ${gpgMajor} -gt 2 || ${gpgMajor} -eq 2 && ${gpgMinor} -ge 1 ]] \
+        && require_binaries gpg-agent \
+        && require_binaries gpg-connect-agent \
+        && ($DRACUT_LDD "${dracutsysrootdir}${scdaemon}" | grep libusb > /dev/null); then
+        return 0
+    else
+        return 1
+    fi
+}
+
+sc_requested() {
+    if [ -f "$dracutsysrootdir$(sc_public_key)" ]; then
+        return 0
+    else
+        return 1
+    fi
+}