Thanks for all the suggestions and links.

I will try putting a new / temporary key into the initramfs just for while I am out of town - the chance of power outage is higher than the chance of burglary.

I'll remove the temp key and rebuild the initramfs after I get back home. Normally, I'm in front of the computer when it reboots, so entering the password manually (as I've been doing for a few years) is fine.

#DMCrypt #DiskEncryption #Linux

Is there a good way to have a #Linux server reboot unattended when the root partition is dm_crypt encrypted? I'm not super worried about bad guys being physically present. More just worried that a power outage might initiate a reboot while I am not present.

Is including the key file in the initramfs (correct terminology?) that horrible a thing if physical access to the machine is not a concern?

Thoughts or advice?

#DMCrypt #DiskEncryption

@edv_nachrichten Klint nach #DigitalSnakeoil und gute #Crypto wie #LUKS / #dmcrypt kann nicht von #Ransomware unterschieden werden auf Datenträgerebene außer durch massive Spikes an #IOPS und die wiederrum können gewollt sein!

Cómo montar un volumen cifrado usando dm-crypt, LUKS y password-store
con lukspass

#Cryptsetup #Disk #DmCrypt #Encrypted #Luks #Mount #Pass #Passphrase #Password #PasswordStore #SysAdmin

https://osiux.com/2023-03-01-how-to-mount-encrypted-volume-using-lukspass.html

@tigernero @RouxJ Makes sense.

Personally I'd use #GnuPG + @nitrokey and full-disk encryption using #dmcrypt on #Linux, but that's just me and as long as one isn't using cringetastic #Windows on an unencrypted SSD that's definitely a good move.

Wow. Must read for dm-crypt users:

https://www.reddit.com/r/linux/comments/zkyzmh/if_your_system_is_installed_on_dmcrypt_and/

tl;dr: disable dm-crypt workqueues

#linux #dmcrypt #luks

Wow. Must read for dm-crypt users:

https://www.reddit.com/r/linux/comments/zkyzmh/if_your_system_is_installed_on_dmcrypt_and/

tl;dr: disable dm-crypt workqueues

#linux #dmcrypt #luks

Disk-Verschlüsselung in Linux wird schneller - Pro-Linux
https://www.pro-linux.de/news/1/27908/disk-verschl%C3%BCsselung-in-linux-wird-schneller.html

#Linux #dmcrypt #verschlüsselung #patch

Hmm ich habe gerade mein Laptop neu aufgesetzt und gerade überlege ich ob es klug gewesen wäre die Installations-Partition etwas kleiner zu halten, damit die Entschlüsselung schneller geht.
Und wenn die mal voll ist kann man dann doch eine neue verschlüsselte Partition anlegen :3

Kann aber auch sein, dass das schon berücksichtigt ist

#LUKS #dmcrypt