Add a LUKS key file to initrd/initramfs to bypass second password prompt?

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty margin-bottom:0;







up vote
0
down vote

favorite












For systems using mkinitcpio, the Arch Linux Wiki contains detailed information.



For systems using mkinitrd, I have also found others have previously had success here.



I am using a Debian based OS with Systemd and mkinitramfs, and the only tutorial I have found is here and out of date as crypttab no longer supports the keyscript parameter.



What method can be used to embed a keyfile in initramfs such that the root drive encryption password is not required twice on boot?



For reference, my drive contains a single encrypted partition containing both the root file system and /boot. I know that an unencrypted boot partition gets around this problem, but obviously that doesn't solve it.







share|improve this question



























    up vote
    0
    down vote

    favorite












    For systems using mkinitcpio, the Arch Linux Wiki contains detailed information.



    For systems using mkinitrd, I have also found others have previously had success here.



    I am using a Debian based OS with Systemd and mkinitramfs, and the only tutorial I have found is here and out of date as crypttab no longer supports the keyscript parameter.



    What method can be used to embed a keyfile in initramfs such that the root drive encryption password is not required twice on boot?



    For reference, my drive contains a single encrypted partition containing both the root file system and /boot. I know that an unencrypted boot partition gets around this problem, but obviously that doesn't solve it.







    share|improve this question























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      For systems using mkinitcpio, the Arch Linux Wiki contains detailed information.



      For systems using mkinitrd, I have also found others have previously had success here.



      I am using a Debian based OS with Systemd and mkinitramfs, and the only tutorial I have found is here and out of date as crypttab no longer supports the keyscript parameter.



      What method can be used to embed a keyfile in initramfs such that the root drive encryption password is not required twice on boot?



      For reference, my drive contains a single encrypted partition containing both the root file system and /boot. I know that an unencrypted boot partition gets around this problem, but obviously that doesn't solve it.







      share|improve this question













      For systems using mkinitcpio, the Arch Linux Wiki contains detailed information.



      For systems using mkinitrd, I have also found others have previously had success here.



      I am using a Debian based OS with Systemd and mkinitramfs, and the only tutorial I have found is here and out of date as crypttab no longer supports the keyscript parameter.



      What method can be used to embed a keyfile in initramfs such that the root drive encryption password is not required twice on boot?



      For reference, my drive contains a single encrypted partition containing both the root file system and /boot. I know that an unencrypted boot partition gets around this problem, but obviously that doesn't solve it.









      share|improve this question












      share|improve this question




      share|improve this question








      edited Jul 29 at 22:32









      slm♦

      232k65479649




      232k65479649









      asked Jul 29 at 22:23









      Sam3000

      1013




      1013

























          active

          oldest

          votes











          Your Answer







          StackExchange.ready(function()
          var channelOptions =
          tags: "".split(" "),
          id: "106"
          ;
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function()
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled)
          StackExchange.using("snippets", function()
          createEditor();
          );

          else
          createEditor();

          );

          function createEditor()
          StackExchange.prepareEditor(
          heartbeatType: 'answer',
          convertImagesToLinks: false,
          noModals: false,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: null,
          bindNavPrevention: true,
          postfix: "",
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          );



          );








           

          draft saved


          draft discarded


















          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f459231%2fadd-a-luks-key-file-to-initrd-initramfs-to-bypass-second-password-prompt%23new-answer', 'question_page');

          );

          Post as a guest



































          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes










           

          draft saved


          draft discarded


























           


          draft saved


          draft discarded














          StackExchange.ready(
          function ()
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f459231%2fadd-a-luks-key-file-to-initrd-initramfs-to-bypass-second-password-prompt%23new-answer', 'question_page');

          );

          Post as a guest













































































          Popular posts from this blog

          Peggy Mitchell

          Palaiologos

          The Forum (Inglewood, California)