1 year ago
#236836
T08
How do we run a key script in initramfs to unlock cryptsetup LUKS volume
Does anyone know how to unlock the LUKS encrypted partition using key script? The idea is to run the keyscript in order to retrieve the key stored in the TPM's NVram and supply that to the LUKS encrypted partition. I'm using systemd-boot, I tried to use the crypttab settings below but every time reboot, it asks for manually input:
# <target name> <source device> <key file> <options>
encrypted_disk UUID=04a7e1c5-c3c7-4008-8058-7a3046811c01 none luks,keyscript=/etc/dummyScript.sh
what I need is a fully automated unlock with the key script to help to unlock it. Thank you.
linux
luks
0 Answers
Your Answer