From: Oleksandr Natalenko <oleksandr@natalenko.name>
To: Hansjoerg Lipp <hjlipp@web.de>
Cc: linux-kernel@vger.kernel.org
Subject: Re: [RFC] Passing luks passphrase from grub to systemd
Date: Mon, 16 Apr 2018 00:25:22 +0200 [thread overview]
Message-ID: <2907407.5HaPOCmciK@natalenko.name> (raw)
Hi.
> as I'm stuck with a (non-EFI x86_64) system with encrypted root
> partition, I have to enter the passphrase twice (grub needs it for
> getting the kernel etc., systemd needs it for mounting the root
> partition). This can be quite inconvenient, especially if the passphrase
> is long and contains special characters, and grub assumes a different
> keyboard layout.
Just fill another LUKS slot with a randomly generated key file and add that
file to your initramfs (which already resides on encrypted /boot, right?). If
your distro cannot do that, you should probably fixing things there, not
adding ugly hacks to the kernel.
Check how it is implemented in Arch, for instance [1]. I'm not sure whether
this is currently possible with openSUSE, though.
Regards,
Oleksandr
[1] https://klmlinks.wordpress.com/2016/03/
next reply other threads:[~2018-04-15 22:25 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-04-15 22:25 Oleksandr Natalenko [this message]
2018-04-16 0:11 ` [RFC] Passing luks passphrase from grub to systemd Hansjoerg Lipp
-- strict thread matches above, loose matches on Subject: below --
2018-04-15 19:06 Hansjoerg Lipp
2018-04-15 22:35 ` Gabriel C
2018-04-15 23:21 ` Hansjoerg Lipp
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2907407.5HaPOCmciK@natalenko.name \
--to=oleksandr@natalenko.name \
--cc=hjlipp@web.de \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox