-
Can support for LUKS detached headers be added? It is possible to encrypt a block device with LUKS and detach the header, it would be nice if we could point to a detached header when trying to unlock …
-
Now line 147 of hook have quotes to each parameter:
`_tmp="$(printf %s "$_ykfde_passphrase" | cryptsetup luksOpen "$YKFDE_LUKS_DEV" "$YKFDE_LUKS_NAME" "$YKFDE_LUKS_OPTIONS" 2>&1)" `
So it can handle…
-
Couldn't figure out why this wasn't working until I looked at the source. Please see here:
https://www.freedesktop.org/software/systemd/man/systemd-cryptsetup-generator.html
ghost updated
7 months ago
-
**Describe the bug**
Any LUKS encrypted device with detached header causes `blkid $_dev -s UUID -o value` to return nil [here in `modules.d/90crypt/module-setup.sh`](https://github.com/dracutdevs/d…
-
How do we bind the luks block that has detached header with clevis?
ghost updated
7 months ago
-
Should we implement LUKS header detaching from freshly locked tombs? Should it be a default?
An option for storing the header could be keeping it in the tomb key itself.
-
Hi,
Would it be possible to add root_key & root_keydev parameter + GPG support ?
To be able to boot a vmlinuz kernel (with better-initramfs embedded into it) stored on an (unencrypted) USB key along…
-
Is this something that’s possible? I’m not sure if Heads requires attached LUKS headers but I think this would be a good feature that some individuals would benefit from.
-
**The problem you're addressing (if any)**
Add the ability to have initramfs load a detached LUKs header from a USB for main disk decryption.
**Describe the solution you'd like**
- User Boots fro…
-
I have a device that was encrypted directly (no partition information) with the detached headers option:
```
#cryptsetup luksFormat --header luks_header.img /dev/sda
```
Doing this means that the …