Re: Adding a "password" via luksAddKey when partition had been initialized via keyfile

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi there,

Last week, i asked a question on this list without getting a
reply. I am not quite sure what the reason is. The answer
may be very obvious or i did not make myself clear.

I'll try to ask the question again in other words, hoping
to make myself understood this time:


I am doing an automatic setup via FAI and try to get
disk encryption from the very start.

My plan is to set up the machine with a throwaway key
and then ask the user at the very end to provide a
password to unlock the disk in the future.

My problem is, that once set up with a keyfile, i can
not figure out how to add a password key to a luks enabled
partition.

Starting with a password and adding a keyfile works fine.
But starting with a keyfile i can not add a password afterwards

Now maybe i simply did not grasp the concept and thus the
right command line option (likely) or it is conceptually
impossible. If so, please tell me why and possibly point
me to a better way to set things up.


I am aware that this question may have been answered elsewhere.
I have browsed the mailinglist archive though, but i did
not find a solution. 
http://article.gmane.org/gmane.linux.kernel.device-mapper.dm-crypt/1881
treats a similar problem, but it is not quite the same.
Other online tutorials and howtos did not cover the problem.
At least not those i have read and i have read a couple of them
until i got cryptsetup working with FAI.

If you understand cryptsetup, i would really appreciate your
two cents worth of thought. The success of this debian gnu/linux
project in an enterprise setting depends quite a bit on an 
effective use of an encrypted harddisk.

best regards,

Christian Folini

-- 
Christian Folini
Informationstechnologie 222
Apache and Linux Desktop Engineering
Tel. 031 338 35 24
christian.folini@xxxxxxx

---------------------------------------------------------------------
dm-crypt mailing list - http://www.saout.de/misc/dm-crypt/
To unsubscribe, e-mail: dm-crypt-unsubscribe@xxxxxxxx
For additional commands, e-mail: dm-crypt-help@xxxxxxxx



[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux