DM-Crypt Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: Arno Wagner <arno@wagner.name>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] Newbie questions: how to configure and mount an encrypted partition on bootup?
Date: Mon, 19 Mar 2012 08:02:19 +0100	[thread overview]
Message-ID: <20120319070219.GA22551@tansi.org> (raw)
In-Reply-To: <CAADET=cJiQmaosf+7Y=sCAamOX=1ywWYJOXUhV1F8pF3cpxgFg@mail.gmail.com>

I suggest you read up on encryption in general. If the passphrase
is stored on the system, the encryption becomes totally worthless.

Arno

On Sun, Mar 18, 2012 at 08:33:43PM -0700, David Li wrote:
>       Hi,
>         I am totally new to dm-crypt. My OS is RHEL5/6.
> 
>         Here is what I want to do:
>         I have a system that is pxebooted and the root fs is nfs mounted
> from
> another server.  But I have a local disk that can be used as an encrypted
> storage perhaps for user data.  In the beginning it's blank with no
> partitions.
> 
>         So the first time I would let the user to decide how to partition
> and
> set up LUKS.  From that point on each subsequent boot would automatically
> mount the encrypted partitions as configured.
> 
>         I am looking for general programmable way  to achieve this. Maybe
> someone has done the exact thing before.
> 
>         Specifically,
>       1.      On first boot, how should I modify the initramfs to prompt
> the
> user to set up LUKS? Or initramfs is not the way, what else?
> 
>         2.      On each subsequent boot, how would I let dm-crypt to
> automatically retrieve the passphrase once the user logins into the system.
> Assume that the passphrase has been stored on the same server to store the
> root fs. I don't want to force him to type in the LUKS passphrase again to
> unlock the partitions.
>         Thanks.
>         David

> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt


-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
One of the painful things about our time is that those who feel certainty 
are stupid, and those with any imagination and understanding are filled 
with doubt and indecision. -- Bertrand Russell 

  reply	other threads:[~2012-03-19  7:02 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-03-19  3:33 [dm-crypt] Newbie questions: how to configure and mount an encrypted partition on bootup? David Li
2012-03-19  7:02 ` Arno Wagner [this message]
2012-03-19  7:27 ` Philipp Wendler

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20120319070219.GA22551@tansi.org \
    --to=arno@wagner.name \
    --cc=dm-crypt@saout.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox