[rhelv6-beta-list] Preload EL6 Workstation with LUKS Encrypted Drive - No Passphrase

Mark Watts m.watts at linux-corner.info
Thu Aug 5 09:05:23 UTC 2010


 On 05/08/10 09:45, Grant Williamson wrote:
>  Here is the desired scenario.
>
> Preinstalled customized EL6 on a Lenovo T400 on Luks encrypted drive.
> /boot  - 500mb - non encrypted
> /          - 50GB   - luks encrypted
> swap   - 2GB     - luks encrypted
> /home  -50 GB  - luks encrypted
>
> On initial boot user is not prompted to enter a global passphrase.
> Firstboot runs requests root password / user id / change global luks
> passphrase.
>
> I can build a firstboot panel to add/change a luks passphrase, is
> there anyway to
> pass a password from grub to unlock luks?
How about using a tiny partition as a --key-file, then simply adding the
users key into another key-slot?

Mark.




More information about the rhelv6-beta-list mailing list