dracut.cmdline.7: add NOTE about how dracut pipes key to cryptsetup
parent
506b219237
commit
173edca09e
|
@ -233,6 +233,29 @@ rd.luks.key=/foo/bar.key
|
||||||
----
|
----
|
||||||
+
|
+
|
||||||
As you see, you can skip colons in such a case.
|
As you see, you can skip colons in such a case.
|
||||||
|
+
|
||||||
|
[NOTE]
|
||||||
|
===============================
|
||||||
|
Dracut pipes key to cryptsetup with _-d -_ argument, therefore you need to pipe
|
||||||
|
to crypsetup luksFormat with _-d -_, too!
|
||||||
|
|
||||||
|
Here follows example for key encrypted with GPG:
|
||||||
|
|
||||||
|
----
|
||||||
|
gpg --quiet --decrypt rootkey.gpg \
|
||||||
|
| cryptsetup -d - -v \
|
||||||
|
--cipher serpent-cbc-essiv:sha256 \
|
||||||
|
--key-size 256 luksFormat /dev/sda3
|
||||||
|
----
|
||||||
|
|
||||||
|
If you use plain keys, just add path to _-d_ option:
|
||||||
|
|
||||||
|
----
|
||||||
|
cryptsetup -d rootkey.key -v \
|
||||||
|
--cipher serpent-cbc-essiv:sha256 \
|
||||||
|
--key-size 256 luksFormat /dev/sda3
|
||||||
|
----
|
||||||
|
===============================
|
||||||
|
|
||||||
MD RAID
|
MD RAID
|
||||||
~~~~~~~
|
~~~~~~~
|
||||||
|
|
Loading…
Reference in New Issue