Start9/start-os
2
0
Fork 0
mirror of https://github.com/Start9Labs/start-os.git synced 2026-03-26 02:11:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

secure erase data drive

Browse Source
This commit is contained in:
Aiden McClelland
2023-03-14 15:02:49 -06:00
parent 2bcc8e0d30
commit 9f7856883d
1 changed files with 60 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

61
backend/src/os_install/mod.rs
View File

@@ -129,6 +129,65 @@ pub async fn execute(
overwrite |= disk.guid.is_none() && disk.partitions.iter().all(|p| p.guid.is_none());
if overwrite {
for (guid, pv) in disk
.guid
.iter()
.map(|guid| (guid, &disk.logicalname))
.chain(
disk.partitions
.iter()
.flat_map(|p| p.guid.as_ref().map(|guid| (guid, &p.logicalname))),
)
{
let device = Path::new("/dev").join(guid);
match tokio::fs::read_dir(&device).await {
Ok(mut dir) => {
while let Ok(Some(lv)) = dir.next_entry().await {
Command::new("cryptsetup")
.arg("erase")
.arg(lv.path())
.invoke(crate::ErrorKind::DiskManagement)
.await?;
Command::new("wipefs")
.arg("-a")
.arg(lv.path())
.invoke(crate::ErrorKind::DiskManagement)
.await?;
Command::new("lvremove")
.arg(lv.path())
.invoke(crate::ErrorKind::DiskManagement)
.await?;
}
Command::new("vgremove")
.arg(&device)
.invoke(crate::ErrorKind::DiskManagement)
.await?;
}
Err(e) => {
tracing::debug!("device for {guid} is not available: {:?}", e);
}
}
Command::new("pvremove")
.arg(pv)
.invoke(crate::ErrorKind::DiskManagement)
.await?;
if pv
.file_name()
.and_then(|f| f.to_str())
.unwrap_or_default()
.starts_with("nvme")
{
Command::new("nvme")
.arg("format")
.arg("-s2")
.arg(pv)
.invoke(crate::ErrorKind::DiskManagement)
.await?;
}
}
}
let part_info = partition(&mut disk, overwrite).await?;
if let Some(efi) = &part_info.efi {
@@ -233,7 +292,7 @@ pub async fn execute(
let dev = MountGuard::mount(&Bind::new("/dev"), current.join("dev"), ReadWrite).await?;
let proc = MountGuard::mount(&Bind::new("/proc"), current.join("proc"), ReadWrite).await?;
let sys = MountGuard::mount(&Bind::new("/sys"), current.join("sys"), ReadWrite).await?;
let efivarfs = if let Some(efi) = &part_info.efi {
let efivarfs = if part_info.efi.is_some() {
Some(
MountGuard::mount(
&EfiVarFs,