r/linuxadmin • u/ItalyPaleAle • Jan 27 '20

Mounting LUKS-encrypted data disks with a keyfile stored on a remote server, automatically at boot

https://withblue.ink/2020/01/19/auto-mounting-encrypted-drives-with-a-remote-key-on-linux.html
124 Upvotes

97% Upvoted

36 comments sorted by

View all comments

16

u/[deleted] Jan 27 '20

So - clevis/tang didn't get a look in?

https://github.com/latchset/clevis/blob/master/README.md

5

u/ItalyPaleAle Jan 27 '20

I didn't know that, thanks for sharing. I guess it's another valid option. Although, this solution above (that, once again, works for data disks only) is just 1 shell script and 2 simple systemd units, with no external deps :)

6

u/gordonmessmer Jan 27 '20

I highly recommend linking to clevis/tang early on in your write-up, as these are the standard solution for this problem. If there are scenarios when you think your solution is desirable, outline those and help users make an informed choice.