GO-2025-4076: Constellation has insecure LUKS2 persistent storage partitions which may be opened and used in github.com/edgelesssys/constellation

csi/

Details

These packages are intended to be used by Kubernetes CSI drivers to enable transparent encryption of storage on the node.

This package uses the C library libcryptsetup for device mapping and crypto operations.

Install on Ubuntu:

sudo apt install libcryptsetup12 libcryptsetup-dev

Install on Fedora:

sudo dnf install cryptsetup-libs cryptsetup-devel

Running the integration test requires root privileges. Build and run the test:

go test -c -tags=integration ./test/
sudo ./test.test

Path	Synopsis
cryptmapper Package cryptmapper provides a wrapper around libcryptsetup to manage dm-crypt volumes for CSI drivers.	Package cryptmapper provides a wrapper around libcryptsetup to manage dm-crypt volumes for CSI drivers.
kms