Skip to content

Get a remote key to open a luks device #95

@mickybart

Description

@mickybart

When you have multiple computers with root encrypted it can be a pain to provide the password each time (or if you have only one with dual boot).

The main target is to have only one computer/NAS/whatever where keyfiles for others are safely stored.

During the boot, a computer will get its own keyfile by using ssh (dropbear client). Once done, cryptsetup will try to use the keyfile (crypttab).
If we are not able to get the keyfile or if the keyfile doesn't permit to open the device, cryptsetup will follow the regular flow and ask for a passord. (Of course, it is possible to use dropbear or tinyssh provided by systemd-tool)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions