this post was submitted on 12 Jan 2025
30 points (96.9% liked)

Linux

48954 readers
811 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
AgreeableLandscape@lemmy.ml
nooter692@lemmy.ml
MarcellusDrum@lemmy.ml
cypherpunks@lemmy.ml
cyclohexane@lemmy.ml
d3Xt3r@lemmy.nz
30
How to auto unlock an encrypted drive on start for a fedora server? (lemmy.selfhostcat.com)
submitted 18 hours ago* (last edited 9 hours ago) by ocean@lemmy.selfhostcat.com to c/linux@lemmy.ml
25 comments fedilink hide all child comments
 

I tried added a key file and even a password txt but both lead to it still asking for me to type in the password.

Is it because the drive is encrypted? I tried placing the files at /, /boot, /root, /etc

Edit1: I’ve tried to install dropbear and give it ssh keys. I will try to reboot in the morning and see what happens

Edit2: signing in via ssh just says port 22 rejected not working :(

you are viewing a single comment's thread
view the rest of the comments
[–] bjoern_tantau@swg-empire.de 7 points 17 hours ago (2 children)

Just putting the key file somewhere does nothing. It has to be in a spot that is not encrypted and the kernel has to know where it is. Putting it on /boot or /boot/efi is one way. Putting it in the initrd is another.

Of course, having the key out in the open defeats the purpose of encrypting the drive in the first place. Sealing it in TPM would be one solution. But still you have to tell the kernel where to find it.

Personally my server has a ssh server in the initrd and allows me to unlock it remotely that way. I think it uses dropbear.

There should be several tutorials for every way. No idea if there are Fedora specific ways to follow.

[–] ocean@lemmy.selfhostcat.com 2 points 17 hours ago

Ah okay I searched dropbear, this seems like a helpful solution!

[–] ocean@lemmy.selfhostcat.com 2 points 17 hours ago (1 children)

I have Tailscale access to the network. Could you please tell me what I should search to be able to ssh input the password? Currently I cannot ssh prior to the password being inputted.

This would be a great solution! Secure and mobile