applications/manjaro-architect
3
0
Fork 0
Code Issues 1 Pull requests Projects Releases 39 Packages Wiki Activity Actions

Add support for keyfiles in luks setup #222

New issue
Closed
opened 2017-11-09 21:37:23 +00:00 by Chrysostomus · 8 comments
Chrysostomus commented 2017-11-09 21:37:23 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

I just tested setting a keyfile in initramfs, worked pretty nicely. As a next project, I would like to have

  1. option to add keyfile in LUKS setup
  2. If using grub with encrypted /boot, automatically setup keyfile and embed it in initramfs, so that user needs to input their password only once.
I just tested setting a keyfile in initramfs, worked pretty nicely. As a next project, I would like to have 1) option to add keyfile in LUKS setup 2) If using grub with encrypted /boot, automatically setup keyfile and embed it in initramfs, so that user needs to input their password only once.
Chrysostomus commented 2018-01-03 11:52:00 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

Initial support now added for encrypted /boot and grub.

Initial support now added for encrypted /boot and grub.
oberon commented 2018-01-06 09:02:33 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

Created by: runningman84

If there is a keyfile added to the initramfs how secure is the whole system? Isn't the initramfs stored unencrypted?

*Created by: runningman84* If there is a keyfile added to the initramfs how secure is the whole system? Isn't the initramfs stored unencrypted?
Chrysostomus commented 2018-01-06 22:25:53 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

Initramfs is stored on /boot. With encrypted /boot, it is pretty much safe. Without encrypted /boot, it renders the whole encryption pointless. Current setup only generates keyfile when /boot is encrypted and grub is used.

Initramfs is stored on /boot. With encrypted /boot, it is pretty much safe. Without encrypted /boot, it renders the whole encryption pointless. Current setup only generates keyfile when /boot is encrypted and grub is used.
oberon commented 2018-01-07 15:59:13 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

Created by: runningman84

Great. If you are already looking into this whole Luks setup it would be cool if you make clear what combination of partition layout, filesystem and boot loader work together.

*Created by: runningman84* Great. If you are already looking into this whole Luks setup it would be cool if you make clear what combination of partition layout, filesystem and boot loader work together.
oberon commented 2018-01-07 19:29:19 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

Created by: beliys

How is it possible to test it? Can you make some instruction?

*Created by: beliys* How is it possible to test it? Can you make some instruction?
Chrysostomus commented 2018-01-08 05:54:27 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

https://forum.manjaro.org/t/testing-needed-for-manjaro-architect/37422/7

For the best results, install this PKGBUILD with makepkg -sric

https://github.com/manjaro/packages-community/tree/master/manjaro-architect-dev

https://forum.manjaro.org/t/testing-needed-for-manjaro-architect/37422/7 For the best results, install this PKGBUILD with makepkg -sric https://github.com/manjaro/packages-community/tree/master/manjaro-architect-dev
oberon commented 2018-01-08 10:39:25 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

Created by: beliys

I think will be better make dev iso for more simple test for most people and it would help find more testers.

*Created by: beliys* I think will be better make dev iso for more simple test for most people and it would help find more testers.
Chrysostomus commented 2018-01-14 19:31:00 +00:00 (Migrated from gitlab2.manjaro.org)
Copy link

point taken.

point taken.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
0.9.39
0.9.38
0.9.37
0.9.36
0.9.35
0.9.34
0.9.33
0.9.32
0.9.31
0.9.30
0.9.29
0.9.28
0.9.27
0.9.26
0.9.25
0.9.24
0.9.23
0.9.22
0.9.21
0.9.20
0.9.19
0.9.18
0.9.17
0.9.16
0.9.15
0.9.14
0.9.12
0.9.11
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9
0.8.18
0.8.17
0.8.16
0.8.15
0.8.14
0.8.13
0.8.12
0.8.11
0.8.10
0.8.9
0.8.8
0.8.7
0.8.6
0.8.5
0.8.4
0.8.3
0.8.2
0.8.1
0.8.0
0.7.4
0.7.3
Labels
Clear labels   
bug

   
duplicate

   
enhancement

   
help wanted

   
invalid

   
question

   
wontfix
No labels
bug
duplicate
enhancement
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
applications/manjaro-architect#222
No description provided.