linux-system-roles / nbde_client

Ansible role for configuring Network Bound Disk Encryption clients (e.g. clevis)
https://linux-system-roles.github.io/nbde_client/
MIT License
14 stars 24 forks source link

correct clevis askpass unit conditional #81

Closed headwest closed 1 year ago

headwest commented 1 year ago

A bug was introduced in PR Add default clevis luks askpass unit #79 which silently fails to configure the clevis askpass unit correctly on RHEL 8.2 and 8.3 with certain versions of the clevis-systemd package installed. This PR fixes it by changing the conditional such that if the clevis-luks-askpass.path service exists, it is enabled. If it doesn't exist, then a version of clevis-systemd that uses templated units is installed, and the unit will be enabled by dracut. Tests have been successful with templated, and static clevis-luks-askpass.path units.

richm commented 1 year ago

[citest]