This commit is contained in:
2026-06-04 00:36:35 +02:00
parent 4c07bc641a
commit bee617d38d
+21 -1
View File
@@ -6,7 +6,24 @@
RAW_PARTITION=/dev/md5
CRYPT_PARTITION=data
KEY_FILE=/etc/cryptsetup-keys.d/data.key
KEY_FILE=/etc/.cryptsetup-keys.d/${CRYPT_PARTITION}.key
# 0.) Create crypted partition
# =============================
# keyfile (1024 bit groß) erstellen
#
mkdir -p $(dirname "${KEY_FILE}")
head -c1024 /dev/urandom > ${KEY_FILE}
cryptsetup luksFormat $RAW_PARTITION "${KEY_FILE}"
cryptsetup luksAddKey -d "${KEY_FILE}" $RAW_PARTITION
cryptsetup luksOpen $RAW_PARTITION "${KEY_FILE}"
# 1) cryptsetup-initramfs entfernen
# =================================
@@ -34,6 +51,9 @@ update-initramfs -u -k all
apt install systemd-cryptsetup
# 3) /etc/crypttab anpassen (kein initramfs mehr)
# ===============================================
#