Comment on Jellyfin on rootles docker access to encrypted drive
Octavusss@lemm.ee 1 week agoOh sorry seems i explained it poorly.
That encrypted drive drive is set to automount on boot since I added it to /etc/fstatb and /etc/crypttab.
This makes things easier. Thank you for clarifying.
AtariDump@lemmy.world 1 week ago
But weakens your security posture. If you’re worried enough to encrypt the drive, you shouldn’t be auto mounting it.
Scholars_Mate@lemmy.world [bot] 1 week ago
This really depends on your threat model. If you are only concerned about the drive getting stolen, or wanting to keep the data on it private if you need to RMA the drive, mounting it automatically on boot with a key stored on the rootfs can be perfectly fine. If you are a journalist in a hostile country and protecting your sources from state level actors is a matter of life and death, then yeah, this would be woefully insufficient.
Octavusss@lemm.ee 1 week ago
Yes. But the main ssd where the OS is installed is also encrypted with different password. So you must first unlock the ssd anyway to automount the hdd.