|
|
|
@ -233,6 +233,29 @@ rd.luks.key=/foo/bar.key
@@ -233,6 +233,29 @@ rd.luks.key=/foo/bar.key
|
|
|
|
|
---- |
|
|
|
|
+ |
|
|
|
|
As you see, you can skip colons in such a case. |
|
|
|
|
+ |
|
|
|
|
[NOTE] |
|
|
|
|
=============================== |
|
|
|
|
Dracut pipes key to cryptsetup with _-d -_ argument, therefore you need to pipe |
|
|
|
|
to crypsetup luksFormat with _-d -_, too! |
|
|
|
|
|
|
|
|
|
Here follows example for key encrypted with GPG: |
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
gpg --quiet --decrypt rootkey.gpg \ |
|
|
|
|
| cryptsetup -d - -v \ |
|
|
|
|
--cipher serpent-cbc-essiv:sha256 \ |
|
|
|
|
--key-size 256 luksFormat /dev/sda3 |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
If you use plain keys, just add path to _-d_ option: |
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
cryptsetup -d rootkey.key -v \ |
|
|
|
|
--cipher serpent-cbc-essiv:sha256 \ |
|
|
|
|
--key-size 256 luksFormat /dev/sda3 |
|
|
|
|
---- |
|
|
|
|
=============================== |
|
|
|
|
|
|
|
|
|
MD RAID |
|
|
|
|
~~~~~~~ |
|
|
|
|