{"action":"created","issue":{"url":"https://api.github.com/repos/Netflix-Skunkworks/stethoscope-app/issues/113","repository_url":"https://api.github.com/repos/Netflix-Skunkworks/stethoscope-app","labels_url":"https://api.github.com/repos/Netflix-Skunkworks/stethoscope-app/issues/113/labels{/name}","comments_url":"https://api.github.com/repos/Netflix-Skunkworks/stethoscope-app/issues/113/comments","events_url":"https://api.github.com/repos/Netflix-Skunkworks/stethoscope-app/issues/113/events","html_url":"https://github.com/Netflix-Skunkworks/stethoscope-app/pull/113","id":413494014,"node_id":"MDExOlB1bGxSZXF1ZXN0MjU1NDY1ODkw","number":113,"title":"Disk encryption kmd source for linux","user":{"login":"erichs","id":513523,"node_id":"MDQ6VXNlcjUxMzUyMw==","avatar_url":"https://avatars3.githubusercontent.com/u/513523?v=4","gravatar_id":"","url":"https://api.github.com/users/erichs","html_url":"https://github.com/erichs","followers_url":"https://api.github.com/users/erichs/followers","following_url":"https://api.github.com/users/erichs/following{/other_user}","gists_url":"https://api.github.com/users/erichs/gists{/gist_id}","starred_url":"https://api.github.com/users/erichs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erichs/subscriptions","organizations_url":"https://api.github.com/users/erichs/orgs","repos_url":"https://api.github.com/users/erichs/repos","events_url":"https://api.github.com/users/erichs/events{/privacy}","received_events_url":"https://api.github.com/users/erichs/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-02-22T17:03:11Z","updated_at":"2019-02-22T17:12:10Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/Netflix-Skunkworks/stethoscope-app/pulls/113","html_url":"https://github.com/Netflix-Skunkworks/stethoscope-app/pull/113","diff_url":"https://github.com/Netflix-Skunkworks/stethoscope-app/pull/113.diff","patch_url":"https://github.com/Netflix-Skunkworks/stethoscope-app/pull/113.patch"},"body":"This is a bit of a hack ATM: it feels like there should be a more\r\nelegant way to declare pipelines for external processing of text data\r\nbefore passing that back to `kmd`.\r\n\r\nThis pipeline processes the output of `lsblk -f` (filesystem block\r\ndevices), e.g.:\r\n\r\n```\r\nnvme0n1                 259:0    0 953.9G  0 disk\r\n├─nvme0n1p1             259:1    0   512M  0 part  /boot/efi\r\n├─nvme0n1p2             259:2    0   732M  0 part  /boot\r\n└─nvme0n1p3             259:3    0 952.7G  0 part\r\n└─nvme0n1p3_crypt     253:0    0 952.7G  0 crypt\r\n  ├─ubuntu--vg-root   253:1    0 930.4G  0 lvm   /\r\n  └─ubuntu--vg-swap_1 253:2    0   976M  0 lvm   [SWAP]\r\n```\r\n\r\nIf the string 'crypt' is found in this output, we are assuming here that the\r\nuser has enabled full disk encryption. There are many possible setups\r\nwith disk encryption on Linux, and this won't catch them all. It\r\n*should* definitely catch the default FDE option for, say, Ubuntu installations.\r\n\r\nAWK will convert this `lsblk` output into a literal '1' or '0'\r\nindicating status.\r\n\r\nSed will transform the literal numeric into a 'true/false' string. This\r\nextra pipeline was to avoid the string escaping nightmare of embedding\r\nquoted strings inside the AWK script such that it also passed JSON\r\nparsing inside `kmd`.\r\n\r\nTested on Fedora and Ubuntu."},"comment":{"url":"https://api.github.com/repos/Netflix-Skunkworks/stethoscope-app/issues/comments/466472422","html_url":"https://github.com/Netflix-Skunkworks/stethoscope-app/pull/113#issuecomment-466472422","issue_url":"https://api.github.com/repos/Netflix-Skunkworks/stethoscope-app/issues/113","id":466472422,"node_id":"MDEyOklzc3VlQ29tbWVudDQ2NjQ3MjQyMg==","user":{"login":"erichs","id":513523,"node_id":"MDQ6VXNlcjUxMzUyMw==","avatar_url":"https://avatars3.githubusercontent.com/u/513523?v=4","gravatar_id":"","url":"https://api.github.com/users/erichs","html_url":"https://github.com/erichs","followers_url":"https://api.github.com/users/erichs/followers","following_url":"https://api.github.com/users/erichs/following{/other_user}","gists_url":"https://api.github.com/users/erichs/gists{/gist_id}","starred_url":"https://api.github.com/users/erichs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erichs/subscriptions","organizations_url":"https://api.github.com/users/erichs/orgs","repos_url":"https://api.github.com/users/erichs/repos","events_url":"https://api.github.com/users/erichs/events{/privacy}","received_events_url":"https://api.github.com/users/erichs/received_events","type":"User","site_admin":false},"created_at":"2019-02-22T17:12:10Z","updated_at":"2019-02-22T17:12:10Z","author_association":"CONTRIBUTOR","body":"This might be \"close enough\" for some environments. A more complete solution would likely involve walking the tree of devices and ensuring that all mounted filesystems are children of a `crypt`ed parent node."}}
{"actor":{"display_login":"erichs"}}