Arch Linux

Razer(x)

Member

Registered: 2006-08-30

Posts: 109

Can I autounlock my LUKS encrypted drive at boot?

Is it possible to auto unlock my LUKS drive at boot?

I know it defeats the purpose, but still

frostschutz

Member

Registered: 2013-11-15

Posts: 1,650

Re: Can I autounlock my LUKS encrypted drive at boot?

It's possible if you write your own encrypt hook or simply provide a static /crypto_keyfile.bin to the default encrypt hook.

schard

Forum Moderator

From: Hannover

Registered: 2016-05-06

Posts: 2,669

Website

Re: Can I autounlock my LUKS encrypted drive at boot?

.. .or you provide the keyfile via an external drive and use the standard parameters to refer to the keyfile on that paricular drive.
Then your / container only unlocks automatically if that drive is plugged in.
→ No purpose defeated.

---

Inofficial first vice president of the Rust Evangelism Strike Force

lfitzgerald

Member

Registered: 2021-07-16

Posts: 175

Re: Can I autounlock my LUKS encrypted drive at boot?

If you make /boot a separate partition, you can then follow https://wiki.archlinux.org/title/Dm-cry … rase_twice to put a key in /boot and have it automatically unlock your root disk. This is written for people who encrypt their boot with a separate password, so the purposes isn't quite defeated - but you can just leave your /boot unencrypted (don't do the rest of https://wiki.archlinux.org/title/Dm-cry … on_(GRUB)) and it should accomplish what you want.