summaryrefslogtreecommitdiff
path: root/op-mode-definitions
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@vyos.io>2024-03-07 16:36:44 +0100
committerGitHub <noreply@github.com>2024-03-07 16:36:44 +0100
commit6e7e7842bc1ba55bd4c91c3af35faf8961793318 (patch)
tree14e32e239451b380e8b2d7bd80b38beeb5b057cf /op-mode-definitions
parent38fdc27ee2b3253053b2794e3e7ec5d8e0d5aa02 (diff)
parent4a882d3f8dfcf1900da9f98f5993c9d63e70d3a8 (diff)
downloadvyos-1x-6e7e7842bc1ba55bd4c91c3af35faf8961793318.tar.gz
vyos-1x-6e7e7842bc1ba55bd4c91c3af35faf8961793318.zip
Merge pull request #1740 from sarthurdev/tpm_luks
config: T4919: Add support for encrypted config with TPM
Diffstat (limited to 'op-mode-definitions')
-rw-r--r--op-mode-definitions/crypt.xml.in28
1 files changed, 28 insertions, 0 deletions
diff --git a/op-mode-definitions/crypt.xml.in b/op-mode-definitions/crypt.xml.in
new file mode 100644
index 000000000..105592a1a
--- /dev/null
+++ b/op-mode-definitions/crypt.xml.in
@@ -0,0 +1,28 @@
+<?xml version="1.0"?>
+<interfaceDefinition>
+ <node name="encryption">
+ <properties>
+ <help>Manage config encryption</help>
+ </properties>
+ <children>
+ <node name="disable">
+ <properties>
+ <help>Disable config encryption using TPM or recovery key</help>
+ </properties>
+ <command>sudo ${vyos_libexec_dir}/vyos-config-encrypt.py --disable</command>
+ </node>
+ <node name="enable">
+ <properties>
+ <help>Enable config encryption using TPM</help>
+ </properties>
+ <command>sudo ${vyos_libexec_dir}/vyos-config-encrypt.py --enable</command>
+ </node>
+ <node name="load">
+ <properties>
+ <help>Load encrypted config volume using TPM or recovery key</help>
+ </properties>
+ <command>sudo ${vyos_libexec_dir}/vyos-config-encrypt.py --load</command>
+ </node>
+ </children>
+ </node>
+</interfaceDefinition>