Re: can't unlock a luks encrypted partition. (urgent).

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Am Sat, 10 Oct 2009 02:35:06 +0300
schrieb Roman Kyrylych <roman.kyrylych@xxxxxxxxx>:

> I have 4 encrypted partitions besides root and don't have this
> problem, but I have real passwords instead of ASK in /etc/crypttab
> (otherwise I would be very lazy to enter them 5 times instead of
> one :-P)

It would probably be a bit more secure to write a keyfile onto a USB
stick either as a file or with dd and apply one of those patches
to /etc/rc.sysinit:
http://bugs.archlinux.org/task/11648
http://bugs.archlinux.org/task/15016

And if you add one of these lines to your kernel line in grub's menu.lst
then you don't need to enter one single passphrase. Just plugin the USB
stick before and unplug it after booting. ;-)

cryptdevice=/dev/sdaX:root root=/dev/mapper/root
cryptkey=/dev/usbkey/KEYFILE

cryptdevice=/dev/sdaX:root root=/dev/mapper/root
cryptkey=/dev/usbkey:OFFSET:SIZE

Heiko


[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux