highperfocused/raspiblitz
1
0
Fork 0
mirror of https://github.com/raspiblitz/raspiblitz.git synced 2025-09-28 04:26:28 +02:00
Code Issues Packages Projects Releases Wiki Activity

cl.hsmtool: run encrypt with sudo

Browse Source
This commit is contained in:
openoms
2022-02-09 09:53:13 +00:00
parent c3bf3c1859
commit ae719bcf73
3 changed files with 18 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
home.admin/00settingsMenuBasics.sh
View File

@@ -458,7 +458,7 @@ if [ "${clEncryptedHSM}" != "${choice}" ] && [ "${clNode}" == "on" ]; then
echo "clEncryptedHSM Setting changed .." echo "clEncryptedHSM Setting changed .."
anychange=1 anychange=1
if [ "${choice}" == "on" ]; then if [ "${choice}" == "on" ]; then
/home/admin/config.scripts/cl.hsmtool.sh encrypt mainnet sudo /home/admin/config.scripts/cl.hsmtool.sh encrypt mainnet
else else
/home/admin/config.scripts/cl.hsmtool.sh decrypt mainnet /home/admin/config.scripts/cl.hsmtool.sh decrypt mainnet
fi fi

2
home.admin/99clRepairMenu.sh
View File

@@ -68,7 +68,7 @@ CHOICE=$(dialog --clear \
case $CHOICE in case $CHOICE in
ENCRYPT) ENCRYPT)
/home/admin/config.scripts/cl.hsmtool.sh encrypt $CHAIN sudo /home/admin/config.scripts/cl.hsmtool.sh encrypt $CHAIN
source /mnt/hdd/raspiblitz.conf source /mnt/hdd/raspiblitz.conf
;; ;;

25
home.admin/config.scripts/cl.hsmtool.sh
View File

@@ -233,8 +233,8 @@ if [ "$1" = "new" ] || [ "$1" = "new-force" ] || [ "$1" = "seed" ] || [ "$1" = "
sudo chown bitcoin:bitcoin /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info sudo chown bitcoin:bitcoin /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info
sudo chmod 600 /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info sudo chmod 600 /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info
echo " echo "
# This file was placed by cl.hsmtool.sh . # This file was placed by cl.hsmtool.sh
# Contains the seed words from which the hsm_secret in the same directory was generated # Contains the seed words from which the hsm_secret in the same directory was generated from
seedwords='${seedwords}' seedwords='${seedwords}'
seedwords6x4='${seedwords6x4}' seedwords6x4='${seedwords6x4}'
# Will be removed safely when the hsm_secret is encrypted. # Will be removed safely when the hsm_secret is encrypted.
@@ -327,8 +327,15 @@ elif [ "$1" = "lock" ]; then
exit 0 exit 0
elif [ "$1" = "encrypt" ]; then elif [ "$1" = "encrypt" ]; then
if [ -f /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info ];then
source <(sudo -u bitcoin cat /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info) # check if sudo
if [ "$EUID" -ne 0 ]; then
echo "Please run as root (with sudo)"
exit 1
fi
if [ -f /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info ]; then
source /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info
if [ ${#seedwords6x4} -gt 0 ];then if [ ${#seedwords6x4} -gt 0 ];then
# show the words one last time # show the words one last time
ack=0 ack=0
@@ -344,12 +351,12 @@ elif [ "$1" = "encrypt" ]; then
else else
deletedWhen="not available any more" deletedWhen="not available any more"
fi fi
# delete seedwords.info # shred seedwords.info
sudo -u bitcoin shred /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info shred /home/bitcoin/.lightning/${CLNETWORK}/seedwords.info
fi fi
echo " echo "
# This file is placed by cl.hsmtool.sh . # This file is placed by cl.hsmtool.sh .
# The seed words from which the hsm_secret in the same directory was generated # The seed words from which the hsm_secret in the same directory was generated from
# were $deletedWhen. # were $deletedWhen.
# The words cannot be generated from the hsm_secret (one way function). # The words cannot be generated from the hsm_secret (one way function).
# If you don't have the words the hsm_secret can be still backed up in hex: # If you don't have the words the hsm_secret can be still backed up in hex:
@@ -392,13 +399,13 @@ elif [ "$1" = "change-password" ]; then
if ! encryptHSMsecret "$walletPassword"; then if ! encryptHSMsecret "$walletPassword"; then
echo "# Warning: the hsm_secret is left unencrypted." echo "# Warning: the hsm_secret is left unencrypted."
echo "# To fix run:" echo "# To fix run:"
echo "/home/admin/config.scripts/cl.hsmtool encrypt $2" echo "sudo /home/admin/config.scripts/cl.hsmtool encrypt $2"
exit 1 exit 1
fi fi
exit 0 exit 0
elif [ "$1" = "check" ]; then elif [ "$1" = "check" ]; then
# TODO # TODO https://github.com/rootzoll/raspiblitz/issues/2897
# dumponchaindescriptors <path/to/hsm_secret> [network] # dumponchaindescriptors <path/to/hsm_secret> [network]
# get current descriptors # get current descriptors
sudo -u bitcoin /home/bitcoin/lightning/tools/hsmtool dumponchaindescriptors \ sudo -u bitcoin /home/bitcoin/lightning/tools/hsmtool dumponchaindescriptors \