luks_device: add built-in signature wiper to work around older wipefs versions with LUKS2 containers (#327) (#330)

* Use 'cryptsetup erase' to kill LUKS signature.

* Adjust unit test.

* Use own wiper for LUKS headers.

* Add comments.

* Fix tests.

* Update changelog.

* Remove 'cryptsetup erase'.

* Improve error messages.

(cherry picked from commit ebbfd7c56f)

Co-authored-by: Felix Fontein <felix@fontein.de>
This commit is contained in:
patchback[bot]
2021-11-11 07:17:45 +01:00
committed by GitHub
parent f315722b31
commit 426d70fbcf
3 changed files with 42 additions and 1 deletions

View File

@@ -0,0 +1,2 @@
bugfixes:
- "luks_device - now also runs a built-in LUKS signature cleaner on ``state=absent`` to make sure that also the secondary LUKS2 header is wiped when older versions of wipefs are used (https://github.com/ansible-collections/community.crypto/issues/326, https://github.com/ansible-collections/community.crypto/pull/327)."