From: Daniel Wagner <dwagner@suse.de>
Date: Thu, 24 Oct 2024 13:07:54 +0000 (+0200)
Subject: nvmf-keys: add udev rule to import tls keys
X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=682e97e137af7dac39c386ff4254db22b1dd0bd8;p=users%2Fsagi%2Fnvme-cli.git

nvmf-keys: add udev rule to import tls keys

Load keys to the keyring when the nvme-tcp module is loaded.

Signed-off-by: Daniel Wagner <dwagner@suse.de>
---

diff --git a/meson.build b/meson.build
index 48b271df..7c10d28a 100644
--- a/meson.build
+++ b/meson.build
@@ -252,6 +252,7 @@ endforeach
 udev_files = [
   '65-persistent-net-nbft.rules',
   '70-nvmf-autoconnect.rules',
+  '70-nvmf-keys.rules',
   '71-nvmf-netapp.rules',
 ]
 
diff --git a/nvmf-autoconnect/udev-rules/70-nvmf-keys.rules.in b/nvmf-autoconnect/udev-rules/70-nvmf-keys.rules.in
new file mode 100644
index 00000000..0b175be9
--- /dev/null
+++ b/nvmf-autoconnect/udev-rules/70-nvmf-keys.rules.in
@@ -0,0 +1,7 @@
+#
+# nvmf-keys.rules:
+#   Load pre-shared keys into the kernel keyring when
+#   the PSK keyring module gets loaded.
+#
+#
+ACTION=="add", SUBSYSTEM=="module", KERNEL=="nvme_tcp", TEST=="@SYSCONFDIR@/tls-keys", RUN+="@SBINDIR@/nvme tls --import --keyfile @SYSCONFDIR@/tls-keys"