Use crypt swap
This commit is contained in:
parent
d378b5f2da
commit
2d50ca2dac
1 changed files with 19 additions and 8 deletions
|
@ -1,12 +1,23 @@
|
||||||
#!/bin/bash
|
#!/bin/bash
|
||||||
|
# Clean up old swap version
|
||||||
if ! [[ -f /swapfile ]]; then
|
if [[ -f /swapfile ]]; then
|
||||||
|
swapoff -a
|
||||||
|
sed -i 's_^/swapfile none swap sw 0 0_#/swapfile none swap sw 0 0_' /etc/fstab
|
||||||
|
rm /swapfile
|
||||||
|
fi
|
||||||
|
# Create crypt swap that should play nice with puppet
|
||||||
|
if ! [[ -f /cryptswap1 ]]; then
|
||||||
gb=$(free --gibi| grep Mem: | awk '{print $2}')
|
gb=$(free --gibi| grep Mem: | awk '{print $2}')
|
||||||
fallocate -l "${gb}G" /swapfile
|
fallocate -l "${gb}G" /cryptswap1
|
||||||
chmod 600 /swapfile
|
chmod 600 /cryptswap1
|
||||||
mkswap /swapfile
|
|
||||||
swapon /swapfile
|
loop=$(losetup -f)
|
||||||
if ! grep -E '^(#)?/swapfile' /etc/fstab; then
|
losetup "${loop}" /cryptswap1
|
||||||
echo '/swapfile none swap sw 0 0' >> /etc/fstab
|
cryptsetup open --type plain --key-file /dev/urandom "${loop}" cryptswap1
|
||||||
|
mkswap /dev/mapper/cryptswap1
|
||||||
|
swapon /dev/mapper/cryptswap1
|
||||||
|
|
||||||
|
if ! grep -E '^/dev/mapper/cryptswap1' /etc/fstab; then
|
||||||
|
echo '/dev/mapper/cryptswap1 none swap sw 0 0' >> /etc/fstab
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
Loading…
Add table
Reference in a new issue