-
Notifications
You must be signed in to change notification settings - Fork 0
Dracut module to unlock LUKS volumes via SSH on CentOS 6
License
tyll/dracut-cryptssh
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
Installation
============
Install dracut-network dropbear
dropbearkey -t rsa -s 3072 -f /etc/dracut-cryptssh/dropbear_rsa_host_key
Add to kernel commandline:
rd.ip=dhcp netroot=dhcp rd.cryptssh=1
Architecture
============
- Use dracut-network to setup network
- Modify 90crypt/cryptroot-ask
- Put unlock information into /root/.profile
- Terminate console prompt when volume is unlocked
- Requires wait_for_file, which requires ask_for_password to be
wrapped
- wait_for_file terminates process when watchfile exists
- Modify initramfs to run custom cryptroot-ask instead of original one:
- Start dropbear (no proper hook is available): It needs to be after
network module was loaded but before crypto devices are unlooked. Both
happens via udev
- Afterwards run modified script (see above)
References/Credits
==================
This dracut module is inspired by information found at the following URLs:
- http://roosbertl.blogspot.de/2012/12/centos6-disk-encryption-with-remote.html
- https://bitbucket.org/bmearns/dracut-crypt-wait
- https://github.com/rlwolfcastle/dracut-crypt-sshd
- https://bugzilla.redhat.com/show_bug.cgi?id=524727
About
Dracut module to unlock LUKS volumes via SSH on CentOS 6
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published