mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-10-01 01:36:09 -04:00
690b50b29d
* Remove unused package * Add Go package docs to most packages Signed-off-by: Daniel Weiße <dw@edgeless.systems> Signed-off-by: Fabian Kammel <fk@edgeless.systems> Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com> Co-authored-by: Fabian Kammel <fk@edgeless.systems>
20 lines
737 B
Markdown
20 lines
737 B
Markdown
# disk-mapper
|
|
|
|
The disk-mapper is a binary that runs during the initramfs of a Constellation node.
|
|
|
|
If running on a new node, it handles setting up the node's state disk by creating an integrity protected encrypted partition.
|
|
|
|
On a rebooting node, the disk-mapper handles recovery of the node by requesting a decryption key for its state disk.
|
|
Once the disk is decrypted, the measurement salt is read from disk and used to extend a PCR to mark the node as initialized.
|
|
|
|
## Testing
|
|
|
|
Integration test is available in `disk-mapper/test/integration_test.go`.
|
|
The integration test requires root privileges since it uses dm-crypt.
|
|
Build and run the test:
|
|
|
|
```bash
|
|
go test -c -tags=integration ./disk-mapper/internal/test/
|
|
sudo ./test.test
|
|
```
|