Arch Linux

Jazztache

Member

Registered: 2022-10-07

Posts: 65

Adding New Keys To The Arch Keyring For Encryption

Hello!

I currently have two encrypted drives. One is my M.2 with the install itself on it, which has a valid key from what I can tell.
The other is my much larger SSD which requires me to enter a password on the boot screen.

I would like to rectify this and have it look at the keyring, without prompting me for a password.
It's gotten annoying enough that I had to disable Plasma's login screen and use the boot screen's password interruption as a pseudo-login

My `/etc/crypttab` looks like this.

ainstnvme0n1p3 UUID=3f727003-7952-4e66-8161-570faba610cd /etc/cryptsetup-keys.d/homeloop.key luks,key-slot=1
sda1 UUID=822e38b0-8253-43b7-8c68-a2bfbc33b25d none luks

The `/etc/cryptsetup-keys.d/homeloop.key` is a jumbled mess of numbers and characters. Not gonna touch it for obvious reasons.

I think I need to add a second key, but I have no idea how to do so.
What should I do? Any documentation pages would be welcome.

Thankyou!

Strike0

Member

From: Germany

Registered: 2011-09-05

Posts: 1,490

Re: Adding New Keys To The Arch Keyring For Encryption

It may be your homeloop.key is not in luks slot 1. Remove "luks,key-slot=1" from the crypttab, regenerate the initramfs and reboot.
It's in the wiki under: https://wiki.archlinux.org/title/Dm-cry … _boot_time