Kyle Isom
e9247c720a
config check: validates UUID format, recognized methods, keyfile consistency and existence. Reports all issues with alias context. remove: deletes a device from config by alias. Inverse of add. status: --mounted, --unlocked, --locked flags filter the device table. Flags combine as OR. mount/unlock: display which method succeeded and key slot used, e.g. "(fido2, key slot 1)". cryptsetup Open now runs with -v and parses "Key slot N unlocked" from stderr via io.MultiWriter. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
60 lines
1.3 KiB
Go
60 lines
1.3 KiB
Go
package cmd
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"git.wntrmute.dev/kyle/arca/internal/config"
|
|
"git.wntrmute.dev/kyle/arca/internal/udisks"
|
|
"git.wntrmute.dev/kyle/arca/internal/unlock"
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
var unlockCmd = &cobra.Command{
|
|
Use: "unlock <device|alias>",
|
|
Short: "Unlock a LUKS volume without mounting",
|
|
Args: cobra.ExactArgs(1),
|
|
RunE: runUnlock,
|
|
ValidArgsFunction: completeDeviceOrAlias,
|
|
}
|
|
|
|
func init() {
|
|
rootCmd.AddCommand(unlockCmd)
|
|
}
|
|
|
|
func runUnlock(cmd *cobra.Command, args []string) error {
|
|
cfg := config.Load()
|
|
target := args[0]
|
|
|
|
client, err := udisks.NewClient()
|
|
if err != nil {
|
|
return fmt.Errorf("connecting to udisks2: %w", err)
|
|
}
|
|
defer client.Close()
|
|
|
|
devCfg := cfg.ResolveDevice(target)
|
|
|
|
dev, err := client.FindDevice(devCfg.UUID, target)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Check if already unlocked.
|
|
if cleartext, err := client.CleartextDevice(dev); err == nil {
|
|
fmt.Printf("%s is already unlocked (%s)\n", target, cleartext.DevicePath)
|
|
return nil
|
|
}
|
|
|
|
u := unlock.New(client, unlock.Options{
|
|
ReadPassphrase: readPassphrase,
|
|
KeyfilePath: devCfg.Keyfile,
|
|
})
|
|
|
|
result, err := u.Unlock(dev, devCfg.Methods)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
fmt.Printf("Unlocked %s -> %s %s\n", target, result.Device.DevicePath, formatMethod(result))
|
|
return nil
|
|
}
|