integritytab replacement

[q3cpma]

Yo, as described in this blog post of mine, I had to cobble something together in order to replace systemd's integritytab(5). Here's what I came up with:

/etc/init.d/dm-integrity:

#!/sbin/openrc-run
# Devices configuration in /etc/conf.d/dm-integrity
# Use service_set_value to remember the devices used during start() ?

echo() { printf '%s\n' "$*"; }
nth_arg_from_end() { local delta=$1; shift; eval echo "\${$(($#-delta))}"; }


depend() {
    use modules
    before checkfs fsck
    after dev-settle
}

start() {
    local status=0 i= dev= argline=

    # dev-settle is "broken", we still need to manually wait for /dev/disk symlinks
    ewaitfile 10 $(echo "$integritysetup_open_args" | awk '! /^$/ {print $(NF-1)}')

    while IFS= read -r argline; do
        dev=$(nth_arg_from_end 1 $argline)
        ebegin "integritysetup open $argline"
        if ! [ -b "$dev" ]; then
            eerror "$dev: device not found even after waiting 10 s"
            continue
        fi
        integritysetup open --batch-mode $argline
        eend $? || status=1
    done <<EOF
$(echo "$integritysetup_open_args" | sed '/^$/d')
EOF

    if [ $status -eq 1 ]; then
        eerror "Failed opening some devices"
        return 1
    fi
}

stop() {
    local name=
    echo "$integritysetup_open_args" | awk '! /^$/ {print $NF}' | while IFS= read -r name; do
        ebegin "integritysetup close $name"
        integritysetup close "$name"
        eend $?
    done
}

status() {
    local name=
    echo "$integritysetup_open_args" | awk '! /^$/ {print $NF}' | while IFS= read -r name; do
        if ! [ -b /dev/mapper/"$name" ]; then
            eerror "$name not opened"
            return 1
        fi
    done
    return 0
}

/etc/conf.d/dm-integrity (only an example, of course):

# /etc/conf.d/dm-integrity: config file for /etc/init.d/dm-integrity

# Each line contains the arguments for an `integritysetup open` call; empty lines are ignored
integritysetup_open_args='
--integrity-bitmap-mode /dev/disk/by-id/ata-ST10000NT001-3LY101_WP027C1N-part1 dm-integrity-WP027C1N
--integrity-bitmap-mode /dev/disk/by-id/ata-ST10000NT001-3LY101_WP027C38-part1 dm-integrity-WP027C38
--integrity-bitmap-mode /dev/disk/by-id/ata-ST10000NT001-3LY101_WP027C98-part1 dm-integrity-WP027C98
--integrity-bitmap-mode /dev/disk/by-id/ata-ST10000NT001-3LY101_WP027C9L-part1 dm-integrity-WP027C9L'

In case it can help a lone desperate soul.