Open LUKS encrypted device via key on USB stick

Wed, 15 Apr 2020 08:50:25 +0000

Background

If you want to encrypt the root file system of a computer running Linux with LUKS, you usually have to entere the encryption password at every system boot. Especially in the case of a headless computer acting as a server this is not suitable. To overcome this problem LUKS offers the possibility to store the encryption key as a keyfile and use it to open the encrypted disk.

There also exist several guides how the keyfile can be stored on a USB stick. Examples include here, here or here (the second and third guides are only available in German).

Encryption on CeMoCom

Open LUKS encrypted device via key on USB stick

Background