Arch Linux

VegetaSSJ5

Member

Registered: 2023-09-11

Posts: 2

[SOLVED] Avoid passphrase entering to unlock bootloader at reboot

I made the Arch installation on a LUKS encrypted partition container on my UEFI laptop and used GRUB as boot loader. When the system starts at the power on it is right that the passphrase is being requested (and then the GRUB menu is shown), but I'm wondering if this could be avoided at reboot.
There is a way to avoid the passphrase entering at system reboot?
Thank you.

Last edited by VegetaSSJ5 (2023-10-09 07:37:48)

ua4000

Member

Registered: 2015-10-14

Posts: 493

Re: [SOLVED] Avoid passphrase entering to unlock bootloader at reboot

no, since BIOS, kernel, and cryptsetup have deleted the master key on 1st shutdown or on reboot.

Theoretically yes, search for "cold boot attack"

VegetaSSJ5

Member

Registered: 2023-09-11

Posts: 2

Re: [SOLVED] Avoid passphrase entering to unlock bootloader at reboot

Thank you ua4000.
I hoped for a different answer but it's right that. Security and comfort travel often separately...