From 9d9f7df00a092de9c2813cb99907092a20e34fd5 Mon Sep 17 00:00:00 2001 From: Ward Vandewege Date: Thu, 25 Feb 2021 17:52:24 -0500 Subject: [PATCH] When a compute node comes up, we run `mkfs.xfs` on a newly encrypted partition. Sometimes there are ghost filesystem signatures on those partitions, make mkfs.xfs ignore partition signatures. No issue # Arvados-DCO-1.1-Signed-off-by: Ward Vandewege --- .../scripts/usr-local-bin-ensure-encrypted-partitions.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/compute-images/scripts/usr-local-bin-ensure-encrypted-partitions.sh b/tools/compute-images/scripts/usr-local-bin-ensure-encrypted-partitions.sh index 08579bf192..462158e043 100644 --- a/tools/compute-images/scripts/usr-local-bin-ensure-encrypted-partitions.sh +++ b/tools/compute-images/scripts/usr-local-bin-ensure-encrypted-partitions.sh @@ -114,7 +114,7 @@ head -c321 /dev/urandom >"$KEYPATH" echo YES | cryptsetup luksFormat "$LVPATH" "$KEYPATH" cryptsetup --key-file "$KEYPATH" luksOpen "$LVPATH" "$(basename "$CRYPTPATH")" shred -u "$KEYPATH" -mkfs.xfs "$CRYPTPATH" +mkfs.xfs -f "$CRYPTPATH" # First make sure docker is not using /tmp, then unmount everything under it. if [ -d /etc/sv/docker.io ] -- 2.30.2