f377dd9ccb
- Require leapp-framework 6.0+ - Update leapp-deps package to satisfy leapp-framework-dependencies 6 - Add dependency on libdb-utils - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token - Adjust resource limitations for leapp to be able to perform the upgrade - Cap max size of the sparse files to 1TiB for storage with large amount of free space - Check that detected Intel CPU microarchitecture is supported on target system - Fix the report when handling broken parsing of kernel cmdline - Generate proper error message instead of ModelViolationError when parsing invalid repository definition - Handle default kernel cmdline when multiple boot entries for the default kernel are defined - Migrate Ruby IRB during the upgrade - Migrate pam_userdb backend during the upgrade - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs - Update leapp upgrade data files - Resolves: RHEL-57043
57 lines
3.0 KiB
Diff
57 lines
3.0 KiB
Diff
From f84c6f808a821d3ccd09a4a8278cef9c09984a28 Mon Sep 17 00:00:00 2001
|
|
From: Daniel Zatovic <daniel.zatovic@gmail.com>
|
|
Date: Wed, 3 Apr 2024 23:25:06 +0200
|
|
Subject: [PATCH 17/40] InhibitWhenLuks: simplify the logic
|
|
|
|
---
|
|
.../common/actors/inhibitwhenluks/actor.py | 35 +++++++------------
|
|
1 file changed, 13 insertions(+), 22 deletions(-)
|
|
|
|
diff --git a/repos/system_upgrade/common/actors/inhibitwhenluks/actor.py b/repos/system_upgrade/common/actors/inhibitwhenluks/actor.py
|
|
index d3ff2d2e..40b845b0 100644
|
|
--- a/repos/system_upgrade/common/actors/inhibitwhenluks/actor.py
|
|
+++ b/repos/system_upgrade/common/actors/inhibitwhenluks/actor.py
|
|
@@ -24,26 +24,17 @@ class InhibitWhenLuks(Actor):
|
|
ceph_info = next(self.consume(CephInfo))
|
|
if ceph_info:
|
|
ceph_vol = ceph_info.encrypted_volumes[:]
|
|
- for storage_info in self.consume(StorageInfo):
|
|
- for blk in storage_info.lsblk:
|
|
- if blk.tp == 'crypt' and blk.name not in ceph_vol:
|
|
- create_report([
|
|
- reporting.Title('LUKS encrypted partition detected'),
|
|
- reporting.Summary('Upgrading system with encrypted partitions is not supported'),
|
|
- reporting.Severity(reporting.Severity.HIGH),
|
|
- reporting.Groups([reporting.Groups.BOOT, reporting.Groups.ENCRYPTION]),
|
|
- reporting.Groups([reporting.Groups.INHIBITOR]),
|
|
- ])
|
|
- break
|
|
except StopIteration:
|
|
- for storage_info in self.consume(StorageInfo):
|
|
- for blk in storage_info.lsblk:
|
|
- if blk.tp == 'crypt':
|
|
- create_report([
|
|
- reporting.Title('LUKS encrypted partition detected'),
|
|
- reporting.Summary('Upgrading system with encrypted partitions is not supported'),
|
|
- reporting.Severity(reporting.Severity.HIGH),
|
|
- reporting.Groups([reporting.Groups.BOOT, reporting.Groups.ENCRYPTION]),
|
|
- reporting.Groups([reporting.Groups.INHIBITOR]),
|
|
- ])
|
|
- break
|
|
+ pass
|
|
+
|
|
+ for storage_info in self.consume(StorageInfo):
|
|
+ for blk in storage_info.lsblk:
|
|
+ if blk.tp == 'crypt' and blk.name not in ceph_vol:
|
|
+ create_report([
|
|
+ reporting.Title('LUKS encrypted partition detected'),
|
|
+ reporting.Summary('Upgrading system with encrypted partitions is not supported'),
|
|
+ reporting.Severity(reporting.Severity.HIGH),
|
|
+ reporting.Groups([reporting.Groups.BOOT, reporting.Groups.ENCRYPTION]),
|
|
+ reporting.Groups([reporting.Groups.INHIBITOR]),
|
|
+ ])
|
|
+ break
|
|
--
|
|
2.47.0
|
|
|