:: Re: [DNG] Complete system HDD encry…
Inizio della pagina
Delete this message
Reply to this message
Autore: g4sra
Data:  
To: dng
Oggetto: Re: [DNG] Complete system HDD encryption w/o LLVM.
On 29/09/2020 19:05, Mason Loring Bliss wrote:
> On Tue, Sep 29, 2020 at 04:02:35PM +0100, g4sra via Dng wrote:
>
>> Copy /boot over onto /
>> * rebuild the initramfs in the NEW /boot on / *
>> ^^^ > ^^^ you will need to hack the initramfs-tools scripts or they will
>> exclude the Luks key ^^^
>
> If you include the "initramfs" option in /etc/crypttab, keys noted in
> entries marked with that will be automatically included.
>


Not in the scripts I had, they explicitly excluded any keys for the root filesystem
because Debian Devs know better than me (including them in an initramfs is insecure).

>
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>