Linux

5184 readers

110 users here now

A community for everything relating to the linux operating system

Also check out [email protected]

Original icon base courtesy of [email protected] and The GIMP

founded 1 year ago

MODERATORS

[email protected]

[Question] Encrypted Partition Unlock via Root Unlocking (programming.dev)

submitted 2 months ago by [email protected] to c/[email protected]

8 comments fedilink hide all child comments

cross-posted from: https://programming.dev/post/19007507

For context:
I've encrypted the swap partition with:
cryptsetup -v luksFormat /dev/${DEVICE}
cryptsetup luksOpen /dev/${DEVICE} swap
And what I want is for the user to be able to enter their password only once to decrypt their root partition which would contain a keyfile to then decrypt their swap partition.

Does anyone know if this is possible?
Just thought I'd ask to see if anyone's done this already

Links:

Dm-crypt Unlocking - With a keyfile embedded in the initramfs

Dm-crypt - Automated unlocking and mounting

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago)

There is a difference here.

Unlocking home later in the boot process is not a problem, so the you can indeed have a keyfile on your root and get your home unlocked and mounted after root is done.

Swap however needs to be available early, at least if you want to use it for hibernation.