1 year ago

#236836

test-img

T08

How do we run a key script in initramfs to unlock cryptsetup LUKS volume

Does anyone know how to unlock the LUKS encrypted partition using key script? The idea is to run the keyscript in order to retrieve the key stored in the TPM's NVram and supply that to the LUKS encrypted partition. I'm using systemd-boot, I tried to use the crypttab settings below but every time reboot, it asks for manually input:

# <target name> <source device>         <key file>      <options>
encrypted_disk UUID=04a7e1c5-c3c7-4008-8058-7a3046811c01 none luks,keyscript=/etc/dummyScript.sh

what I need is a fully automated unlock with the key script to help to unlock it. Thank you.

linux

luks

0 Answers

Your Answer

Accepted video resources