Unnamed repository
Go to file
Coiby Xu d692a044a1 Remove unused LUKS volume keys from keyring
Resolves: https://issues.redhat.com/browse/RHEL-104940
Conflict: None

commit d7f96424b6dd646803191996a3000af361246f15
Author: Coiby Xu <coxu@redhat.com>
Date:   Wed Sep 17 16:03:22 2025 +0800

    Remove unused LUKS volume keys from keyring

    Currently the LUKS volume keys created via the link-volume-key option
    won't expire. Although the logon key can never leave the kernel and can
    only be used by root, it's safer to remove them from keyring if they are
    no longer used by kdump.

    Signed-off-by: Coiby Xu <coxu@redhat.com>
    Assisted-by: Claude Code

Signed-off-by: Coiby Xu <coxu@redhat.com>
2025-10-13 12:28:51 +08:00
spec Remove unused LUKS volume keys from keyring 2025-10-13 12:28:51 +08:00
tests Merged update from upstream sources 2020-11-20 12:35:49 +00:00
.editorconfig kdump-lib-initramfs.sh: prepare to be a POSIX compatible lib 2021-11-09 21:45:15 +08:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
60-fadump.install fadump: add a kernel install hook to clean up fadump initramfs 2022-12-22 14:36:23 +08:00
60-kdump.install Write to /var/lib/kdump if $KDUMP_BOOTDIR not writable 2021-06-23 09:34:40 +08:00
92-crashkernel.install Prefix reset-crashkernel-{for-installed_kernel,after-update} with underscore 2022-10-27 14:47:57 +08:00
98-kexec.rules RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
98-kexec.rules.ppc64 powerpc: update fadump sysfs node path 2023-09-21 15:06:07 +08:00
99-kdump.conf 99-kdump.conf: Omit clevis related dracut modules 2025-04-17 06:25:41 +00:00
crashkernel-howto.txt kdumpctl: deprecate --reboot for reset-creashkernel 2025-09-17 15:39:07 +02:00
dracut-early-kdump-module-setup.sh dracut-early-kdump-module-setup.sh: install xargs and kdump-lib-initramfs.sh 2022-01-06 14:31:33 +08:00
dracut-early-kdump.sh powerpc: update kdumpctl to load kernel signing key for fadump 2023-11-08 01:36:58 +00:00
dracut-fadump-init-fadump.sh fadump-init: clean up mount points properly 2021-07-20 15:43:43 +08:00
dracut-fadump-module-setup.sh fadump: isolate fadump initramfs image within the default one 2021-07-20 15:43:11 +08:00
dracut-kdump-capture.service RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
dracut-kdump-emergency.service Merge kdump-error-handler.sh into kdump.sh 2021-11-09 21:45:31 +08:00
dracut-kdump-emergency.target RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
dracut-kdump.sh Re-introduce vmcore creation notification to kdump 2024-12-06 15:27:20 +13:00
dracut-kexec-crypt-setup.sh Support dumping to a LUKS-encrypted target 2025-10-13 12:28:47 +08:00
dracut-module-setup.sh Limit LUKS support to x86_64 2025-10-13 12:28:51 +08:00
dracut-monitor_dd_progress RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
early-kdump-howto.txt RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
fadump-howto.txt fadump: pass additional parameters for capture kernel 2024-12-09 21:45:00 +08:00
gating.yaml Add gating.yaml to RHEL-9 kexec-tools 2021-06-08 20:03:41 +08:00
gen-kdump-conf.sh Note user-specified crashkernel value will be overwritten by default value 2025-02-24 11:02:47 +08:00
kdump-dep-generator.sh Merged update from upstream sources 2021-01-22 08:12:00 +00:00
kdump-in-cluster-environment.txt RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
kdump-lib-initramfs.sh Support dumping to a LUKS-encrypted target 2025-10-13 12:28:47 +08:00
kdump-lib.sh Return LUKS devices in the form of UUIDs directly 2025-10-13 12:28:51 +08:00
kdump-logger.sh Add header comment for POSIX compliant scripts 2021-11-10 10:26:54 +08:00
kdump-migrate-action.sh kdump/ppc64: rebuild initramfs image after migration 2021-12-03 18:13:09 +08:00
kdump-restart.sh kdump/ppc64: rebuild initramfs image after migration 2021-12-03 18:13:09 +08:00
kdump-udev-throttler Fix SC2181 issues in kdump-udev-throttler 2025-10-13 12:28:51 +08:00
kdump.conf.5 doc/kdump.conf: correctly align the options 2025-04-08 17:33:14 +02:00
kdump.service kdump.service: Replace ConditionKernelCommandLine with ExecCondition 2025-01-09 11:56:38 +08:00
kdump.sysconfig sysconfig: disable kfence in kdump kernel 2025-08-06 16:57:43 +08:00
kdump.sysconfig.aarch64 sysconfig: disable kfence in kdump kernel 2025-08-06 16:57:43 +08:00
kdump.sysconfig.i386 sysconfig: disable kfence in kdump kernel 2025-08-06 16:57:43 +08:00
kdump.sysconfig.ppc64 sysconfig: disable kfence in kdump kernel 2025-08-06 16:57:43 +08:00
kdump.sysconfig.ppc64le sysconfig: disable kfence in kdump kernel 2025-08-06 16:57:43 +08:00
kdump.sysconfig.s390x sysconfig: disable kfence in kdump kernel 2025-08-06 16:57:43 +08:00
kdump.sysconfig.x86_64 sysconfig: disable kfence in kdump kernel 2025-08-06 16:57:43 +08:00
kdumpctl Remove unused LUKS volume keys from keyring 2025-10-13 12:28:51 +08:00
kdumpctl.8 Limit LUKS support to x86_64 2025-10-13 12:28:51 +08:00
kexec_file-add-kexec_file-flag-to-support-debug-prin.patch kexec_file: add kexec_file flag to support debug printing 2024-05-07 20:26:22 +08:00
kexec-kdump-howto.txt Limit LUKS support to x86_64 2025-10-13 12:28:51 +08:00
kexec-tools.spec Support dumping to a LUKS-encrypted target 2025-10-13 12:28:47 +08:00
kexec-update-manpage-with-explicit-mention-of-clean-.patch kexec: update manpage with explicit mention of clean kexec 2023-10-31 13:21:58 +08:00
live-image-kdump-howto.txt RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
mkdumprd Support dumping to a LUKS-encrypted target 2025-10-13 12:28:47 +08:00
mkdumprd.8 Merged update from upstream sources 2020-12-23 10:00:07 +00:00
mkfadumprd fadump: use 'zstd' as the default compression method 2022-12-22 14:36:23 +08:00
README RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00
sources Release 2.0.29-1 2024-11-06 16:27:38 +13:00
supported-kdump-targets.txt Limit LUKS support to x86_64 2025-10-13 12:28:51 +08:00
zanata-notes.txt RHEL 9.0.0 Alpha bootstrap 2020-10-15 14:45:57 +02:00

Adding a patch to kexec-tools
=============================
There is a mailing list kexec@lists.fedoraproject.org where all the dicussion
related to fedora kexec-tools happen. All the patches are posted there for
inclusion and committed to kexec-tools after review.

So if you want your patches to be included in fedora kexec-tools package,
post these to kexec@lists.fedoraproject.org.

One can subscribe to list and browse through archives here.

https://admin.fedoraproject.org/mailman/listinfo/kexec