Comment on Encrypting data on local servers?
xrun_detected@programming.dev 2 weeks ago
I’m using github.com/dracut-crypt-ssh/dracut-crypt-ssh on some of my servers. The initrd opens an ssh port where you can login and enter the passphrase. Setting it up is non-trivial, but it works well. Haven’t tried it on Debian but there should be something similar.
skankhunt42@lemmy.ca 2 weeks ago
This is actually really interesting, I might have to try this.
I currently use a USB stick with a key file on it that I need to plug in on boot. Something like this but it wasn’t that easy for me. openterprise.it/…/fedora-unlock-luks-full-disk-en…