• 1 Post
  • 286 Comments
Joined 1 year ago
cake
Cake day: December 26th, 2023

help-circle


















  • You have systemd right?

    The process is, to simplify:

    1. Generate a keyfile. You should make sure to chmod 600 it. Or better yet keep it in a folder.
    2. Add this keyfile to the LUKS container. You should make sure to test it.
    3. Edit /etc/crypttab to include a line to auto-unlock the LUKS container by UUID. You will also specify a logical name, which will mount the block device at /dev/mapper/<logicalname>
    4. Edit /etc/fstab to auto mount /dev/mapper/<logicalname> at /path/to/mountpoint

    On startup, systemd will read these files and dynamically create a service for it.