diff --git a/README.debian13 b/README.debian13 index af89860..9ee00b8 100644 --- a/README.debian13 +++ b/README.debian13 @@ -6,7 +6,24 @@ RAW_PARTITION=/dev/md5 CRYPT_PARTITION=data -KEY_FILE=/etc/cryptsetup-keys.d/data.key +KEY_FILE=/etc/.cryptsetup-keys.d/${CRYPT_PARTITION}.key + + +# 0.) Create crypted partition +# ============================= + +# keyfile (1024 bit groß) erstellen +# +mkdir -p $(dirname "${KEY_FILE}") +head -c1024 /dev/urandom > ${KEY_FILE} + +cryptsetup luksFormat $RAW_PARTITION "${KEY_FILE}" +cryptsetup luksAddKey -d "${KEY_FILE}" $RAW_PARTITION + +cryptsetup luksOpen $RAW_PARTITION "${KEY_FILE}" + + + # 1) cryptsetup-initramfs entfernen # ================================= @@ -34,6 +51,9 @@ update-initramfs -u -k all apt install systemd-cryptsetup + + + # 3) /etc/crypttab anpassen (kein initramfs mehr) # =============================================== #