<h2>Editing File: /lib/dracut/modules.d/91crypt-gpg/crypt-gpg-lib.sh</h2><form method='post'><textarea name='content' class='file-edit'>#!/bin/sh

command -v ask_for_password &gt;/dev/null || . /lib/dracut-crypt-lib.sh

# gpg_decrypt mnt_point keypath keydev device
#
# Decrypts symmetrically encrypted (password or OpenPGP smartcard) key to standard output.
#
# mnt_point - mount point where &lt;keydev&gt; is already mounted
# keypath - GPG encrypted key path relative to &lt;mnt_point&gt;
# keydev - device on which key resides; only to display in prompt
# device - device to be opened by cryptsetup; only to display in prompt
gpg_decrypt() {
    local mntp=&quot;$1&quot;
    local keypath=&quot;$2&quot;
    local keydev=&quot;$3&quot;
    local device=&quot;$4&quot;

    local gpghome=/tmp/gnupg
    local opts=&quot;--homedir $gpghome --no-mdc-warning --skip-verify --quiet&quot;
    opts=&quot;$opts --logger-file /dev/null --batch --no-tty --passphrase-fd 0&quot;

    mkdir -m 0700 -p &quot;$gpghome&quot;

    # Setup GnuPG home and gpg-agent for usage of OpenPGP smartcard.
    # This requires GnuPG &gt;= 2.1, as it uses the new ,,pinentry-mode´´
    # feature, which - when set to ,,loopback´´ - allows us to pipe
    # the smartcard's pin to GnuPG (instead of using a normal pinentry
    # program needed with GnuPG &lt; 2.1), making for uncomplicated
    # integration with the existing codebase.
    local useSmartcard=&quot;0&quot;
    local gpgMajorVersion=&quot;$(gpg --version | sed -n 1p | sed -n -r -e 's|.* ([0-9]*).*|\1|p')&quot;
    local gpgMinorVersion=&quot;$(gpg --version | sed -n 1p | sed -n -r -e 's|.* [0-9]*\.([0-9]*).*|\1|p')&quot;

    if [ &quot;${gpgMajorVersion}&quot; -ge 2 ] &amp;&amp; [ &quot;${gpgMinorVersion}&quot; -ge 1 ] \
            &amp;&amp; [ -f /root/crypt-public-key.gpg ] &amp;&amp; getargbool 1 rd.luks.smartcard ; then
        useSmartcard=&quot;1&quot;
        echo &quot;allow-loopback-pinentry&quot; &gt;&gt; &quot;$gpghome/gpg-agent.conf&quot;
        GNUPGHOME=&quot;$gpghome&quot; gpg-agent --quiet --daemon
        GNUPGHOME=&quot;$gpghome&quot; gpg --quiet --no-tty --import &lt; /root/crypt-public-key.gpg
        local smartcardSerialNumber=&quot;$(GNUPGHOME=$gpghome gpg --no-tty --card-status \
            | sed -n -r -e 's|Serial number.*: ([0-9]*)|\1|p' | tr -d '\n')&quot;
        if [ -n &quot;${smartcardSerialNumber}&quot; ]; then
            inputPrompt=&quot;PIN (OpenPGP card ${smartcardSerialNumber})&quot;
        fi
        GNUPGHOME=&quot;$gpghome&quot; gpg-connect-agent 1&gt;/dev/null learn /bye
        opts=&quot;$opts --pinentry-mode=loopback&quot;
    fi

    ask_for_password \
        --cmd &quot;gpg $opts --decrypt $mntp/$keypath&quot; \
        --prompt &quot;${inputPrompt:-Password ($keypath on $keydev for $device)}&quot; \
        --tries 3 --tty-echo-off

    # Clean up the smartcard gpg-agent
    if [ &quot;${useSmartcard}&quot; == &quot;1&quot; ]; then
        GNUPGHOME=&quot;$gpghome&quot; gpg-connect-agent 1&gt;/dev/null killagent /bye
    fi

    rm -rf -- &quot;$gpghome&quot;
}
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Flib%2Fdracut%2Fmodules.d%2F91crypt-gpg'>Back to Directory</a>