search

mmgen / mmgen-geek-tools

Random scripts to make a geek’s life easier
GNU General Public License v3.0
15 stars 5 forks source link

Getty over SSH? #1

Closed Kodmod closed 3 years ago

Kodmod commented 3 years ago

The only problem with this script, like CRYPTROOT_ENABLE with the Armbian-build options, is that you cannot connect to the device if it has no ethernet port. I think the easiest way to take care of this would be to enable Getty instead of Dropbear SSH. That way, you can decrypt the FS over serial, and then log in normally over WiFi or USB (or serial again). This should make it compatible with everything.

mmgen commented 3 years ago

Good point. I'll look into adding serial unlock/login. But it would be best to leave the ethernet functionality in too so that users have a choice. Most Armbian-supported boards I know of have an ethernet port, and that's the most familiar option for most users.

Kodmod commented 3 years ago

But it would be best to leave the ethernet functionality in too so that users have a choice.

Agreed.

mmgen commented 3 years ago

Support for disk unlocking / login from the serial console added with commit 73bbc47.

Enabling this feature has no effect on dropbear/SSH unlocking, though it disables unlocking from the VT.