Home / ubuntu / Questions / 181518
In Process
antivirtel
Asked: 2012-08-29 12:10:11 +0800 CST

Store the passphrase of encrypted disk in /etc/crypttab encrypted

  • 772

I'm wondering, if I can store the passphrase of an encrypted disk in /etc/crypttab encrypted - and only possible to decrypt that by that OS, where I created. Is it possible?

(because, I want auto mount the disk after a restart, but I don't want to allow to read that password from the file with a simple live disk)

Thanks

configuration

1 Answers

  1. First, add a keyfile to each encrypted volume then, simply edit your crypttab [/etc/crypttab] to include your extra encrypted volumes.

    Make a key:

    The keyfile can be of arbitrary content and size. We will generate a random temporary keyfile of 2048 bytes:

    dd if=/dev/urandom of=secretkey bs=512 count=4

    Add a key

    cryptsetup luksAddKey /dev/sda2 secretkey

    Enter any LUKS passphrase:

    key slot 0 unlocked.

    Command successful.

    Add to crypttab:

    label      UUID=#       keyfile-location     luks
    • 3