jgaunt/truenas-kmip-unlocker
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update 'README.md'

Browse Source
This commit is contained in:
jgaunt
2020-08-02 21:51:56 -04:00
parent a5f56a37b3
commit 47fb0a5596
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
README.md
View File

@@ -21,13 +21,19 @@ suppress_ragged_eofs=True
#### Encrypt your encryption passphrase
Run the following command to encrypt your passphrase, it will ask for you passphrase and to confirm it before outputting the encrypted passphrase. Take the encrypted passphrase and create a new section in the config ini file. The section name will be the pool name and the only key in that section is the encrypted_key which will be this value.
`python truenas-kmip-unlock.py --encrypt`
```
python truenas-kmip-unlock.py --encrypt
```
#### Create Task
Create a PostInt task that will call this script to unlock the drives
`python /root/truenas-kmip-unlocker/truenas-kmip-unlock.py`
```
python /root/truenas-kmip-unlocker/truenas-kmip-unlock.py
```
#### Debugging
Nothing is logged to a file for this. Everything is outputted to the console. If the debugging level is set to **DEBUG**, all passphrases will be outputted in plain text. This is to ensure the decryption is working correctly.
To enabled debug mode, change the line below to **DEBUG** instead of INFO
`logger = utils.build_console_logger(logging.INFO)`
```
logger = utils.build_console_logger(logging.INFO)
```