constellation/csi
Daniel Weiße 1077b7a48e
bootstrapper: wipe disk and reboot on non-recoverable error (#2971)
* Let JoinClient return fatal errors
* Mark disk for wiping if JoinClient or InitServer return errors
* Reboot system if bootstrapper detects an error
* Refactor joinClient start/stop implementation
* Fix joining nodes retrying kubeadm 3 times in all cases
* Write non-recoverable failures to syslog before rebooting

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-03-12 11:43:38 +01:00
..
cryptmapper chore: fix unused parameter lint in new golangcilint version 2024-02-21 17:54:07 +01:00
kms goleak: ignore rules_go SIGTERM handler 2024-01-22 13:11:58 +01:00
test bootstrapper: wipe disk and reboot on non-recoverable error (#2971) 2024-03-12 11:43:38 +01:00
README.md Rename mount package to csi (#47) 2022-09-05 08:42:55 +02:00

Constellation CSI tools

These packages are intended to be used by Kubernetes CSI drivers to enable transparent encryption of storage on the node.

Dependencies

This package uses the C library libcryptsetup for device mapping and crypto operations.

  • Install on Ubuntu:

    sudo apt install libcryptsetup12 libcryptsetup-dev
    
  • Install on Fedora:

    sudo dnf install cryptsetup-libs cryptsetup-devel
    

Testing

Running the integration test requires root privileges. Build and run the test:

go test -c -tags=integration ./test/
sudo ./test.test