2d7bee74f8
pkcs11 and pcsc don't seem to have ever worked.
In the case of pkcs11, the following install line is incorrect (note the dot before *):
{"tls/$_arch/",tls/,"$_arch/",}"/cryptsetup/libcryptsetup-token-systemd-pkcs11.so.*"
And it should be:
{"tls/$_arch/",tls/,"$_arch/",}"/cryptsetup/libcryptsetup-token-systemd-pkcs11.so*"
I opened a PR and it was merged a while ago: https://github.com/dracutdevs/dracut/pull/2540
In the case of pcsc there are two problems.
One, the installation file is missing /usr/share/p11-kit/modules/opensc.module and without that, you can't really do anything.
Two, dracut doesn't include polkit and pcsc is compiled with it enabled by default. The option --disable-polkit was added to pcscd in 2.0, precisely to address this issue. It needs to be added to pcscd.service in the module for it to work on initramfs.
I opened another PR which has been approved by 2 reviewers and merged into openSUSE: https://github.com/dracutdevs/dracut/pull/2547
Signed-off-by: Manuel Fombuena <fombuena@outlook.com>
24 lines
1.0 KiB
Diff
24 lines
1.0 KiB
Diff
From 1c762c0da6ed2bb6fa44d5e0968605cc4d45361c Mon Sep 17 00:00:00 2001
|
|
From: innovara <fombuena@outlook.com>
|
|
Date: Fri, 27 Oct 2023 11:53:49 +0100
|
|
Subject: [PATCH] fix(pkcs11): delete trailing dot on
|
|
libcryptsetup-token-systemd-pkcs11.so
|
|
|
|
libcryptsetup-token-systemd-pkcs11.so.* doesn't match the file libcryptsetup-token-systemd-pkcs11.so
|
|
---
|
|
modules.d/91pkcs11/module-setup.sh | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/modules.d/91pkcs11/module-setup.sh b/modules.d/91pkcs11/module-setup.sh
|
|
index 547631db66..5675efb580 100755
|
|
--- a/modules.d/91pkcs11/module-setup.sh
|
|
+++ b/modules.d/91pkcs11/module-setup.sh
|
|
@@ -30,6 +30,6 @@ install() {
|
|
{"tls/$_arch/",tls/,"$_arch/",}"libffi.so.*" \
|
|
{"tls/$_arch/",tls/,"$_arch/",}"libp11-kit.so.*" \
|
|
{"tls/$_arch/",tls/,"$_arch/",}"libcryptsetup.so.*" \
|
|
- {"tls/$_arch/",tls/,"$_arch/",}"/cryptsetup/libcryptsetup-token-systemd-pkcs11.so.*"
|
|
+ {"tls/$_arch/",tls/,"$_arch/",}"/cryptsetup/libcryptsetup-token-systemd-pkcs11.so*"
|
|
|
|
}
|