On Sun, Jan 17, 2010 at 07:36:33PM -0800, Bryan Kadzban wrote: > > So with a couple of changes to the initramfs, and the attached patch > (against current SVN), I could send the passphrase over the network > instead of typing it in. ... > Comments? Apologies if this is well known already, but have a look at http://www.debian-administration.org/articles/579, which claims to solve this problem by embedding a lightweight ssh server in the initramfs, and allows either local or remote booting without sending the passphrase in clear text. It doesn't appear to require any source code modifications to cryptsetup. I for one would be very interested in a standard solution that would be applicable to remotely hosted dedicated servers. _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt