smallsolar/u-boot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

luks: Add a simple command

Browse Source 
Add a 'luks' command which allows querying a partition to see if it is
encrypted using LUKS, as well as showing information about a LUKS
partition.

Provide some documentation and a test.

Co-developed-by: Claude <noreply@anthropic.com>
Signed-off-by: Simon Glass <sjg@chromium.org>
This commit is contained in:
Simon Glass
2025-10-23 12:46:49 +01:00
parent 8410d62604
commit 414baddf37
8 changed files with 315 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
cmd/Kconfig
View File

@@ -2819,6 +2819,15 @@ config CMD_FS_UUID
help
Enables fsuuid command for filesystem UUID.
config CMD_LUKS
bool "luks command"
depends on BLK_LUKS
default y if BLK_LUKS
help
Enables the 'luks' command for detecting LUKS (Linux Unified Key
Setup) encrypted partitions. This command checks if a partition
is LUKS encrypted and displays the LUKS version (1 or 2).
config CMD_JFFS2
bool "jffs2 command"
select FS_JFFS2

1
cmd/Makefile
View File

@@ -90,6 +90,7 @@ obj-$(CONFIG_CMD_SQUASHFS) += sqfs.o
obj-$(CONFIG_CMD_SELECT_FONT) += font.o
obj-$(CONFIG_CMD_FLASH) += flash.o
obj-$(CONFIG_CMD_FPGA) += fpga.o
obj-$(CONFIG_CMD_LUKS) += luks.o
obj-$(CONFIG_CMD_FPGAD) += fpgad.o
obj-$(CONFIG_CMD_FS_GENERIC) += fs.o
obj-$(CONFIG_CMD_FUSE) += fuse.o

67
cmd/luks.c Normal file
View File

@@ -0,0 +1,67 @@
// SPDX-License-Identifier: GPL-2.0+
/*
* LUKS (Linux Unified Key Setup) command
*
* Copyright (C) 2025 Canonical Ltd
*/
#include <blk.h>
#include <command.h>
#include <dm.h>
#include <luks.h>
#include <part.h>
static int do_luks_detect(struct cmd_tbl *cmdtp, int flag, int argc,
char *const argv[])
{
struct blk_desc *dev_desc;
struct disk_partition info;
int part, ret, version;
if (argc != 3)
return CMD_RET_USAGE;
part = blk_get_device_part_str(argv[1], argv[2], &dev_desc, &info, 1);
if (part < 0)
return CMD_RET_FAILURE;
ret = luks_detect(dev_desc->bdev, &info);
if (ret < 0) {
printf("Not a LUKS partition (error %dE)\n", ret);
return CMD_RET_FAILURE;
}
version = luks_get_version(dev_desc->bdev, &info);
printf("LUKS%d encrypted partition detected\n", version);
return CMD_RET_SUCCESS;
}
static int do_luks_info(struct cmd_tbl *cmdtp, int flag, int argc,
char *const argv[])
{
struct blk_desc *dev_desc;
struct disk_partition info;
int part, ret;
if (argc != 3)
return CMD_RET_USAGE;
part = blk_get_device_part_str(argv[1], argv[2], &dev_desc, &info, 1);
if (part < 0)
return CMD_RET_FAILURE;
ret = luks_show_info(dev_desc->bdev, &info);
if (ret < 0)
return CMD_RET_FAILURE;
return CMD_RET_SUCCESS;
}
static char luks_help_text[] =
"detect <interface> <dev[:part]> - detect if partition is LUKS encrypted\n"
"luks info <interface> <dev[:part]> - show LUKS header information";
U_BOOT_CMD_WITH_SUBCMDS(luks, "LUKS (Linux Unified Key Setup) operations",
luks_help_text,
U_BOOT_SUBCMD_MKENT(detect, 3, 1, do_luks_detect),
U_BOOT_SUBCMD_MKENT(info, 3, 1, do_luks_info));