aboutsummaryrefslogtreecommitdiffstats
path: root/fripost-install.template
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2013-10-07 06:25:39 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 04:27:26 +0200
commit56c9372d22859203caf7dcabf271896ddf9e216c (patch)
tree0e09455878e5f84e02ec5e303b5f2286d5ffa81a /fripost-install.template
parenta64e8005a6bc0004c77a2baff8b28e3a0f031e8e (diff)
Factorization: Separate the logic from the text.
Diffstat (limited to 'fripost-install.template')
-rw-r--r--fripost-install.template23
1 files changed, 23 insertions, 0 deletions
diff --git a/fripost-install.template b/fripost-install.template
index 44b3418..6c10976 100644
--- a/fripost-install.template
+++ b/fripost-install.template
@@ -27,3 +27,26 @@ Description: Filling ${DISK} with ${SIZE} ${WHAT}
Template: fripost-install/full-disk-encryption-fill_progress_info
Type: text
Description: ${COMMAND}
+
+Template: fripost-install/full-disk-encryption-slurpkey_title
+Type: note
+Description: Waiting for passphrase
+
+Template: fripost-install/full-disk-encryption-slurpkey_text
+Type: text
+Description: Press 'continue' once you have sent the key
+ You now need to send the encryption key for LUKS/dm-crypt to
+ this special-purpose SSH server:
+ .
+ ssh -T -p 22 -l root ${IPv4} < /path/to/key
+ .
+ To defeat MiTM-attacks, please ensure that the server fingerprint matches
+ .
+ ${SSHFPR_SERVER}
+ .
+ Key(s) that are granted access have the following fingerprint:
+ .
+ ${SSHFPR_AUTHORIZED}
+ .
+ Note: This server is ephemeral, and will be replaced with a full-blown
+ one toward the end of the installation.