booster icon indicating copy to clipboard operation
booster copied to clipboard
verified publisher icon anatol

Extend unlocking mechanism to non-LUKS partitions

Open anatol opened this issue 4 years ago • 0 comments

Currently, booster employs clevis to unlock LUKS partitions. It would be great to extend the unlocking functionality to other existing technologies:

  • plain dm-crypt devices
  • ext4 per-directory encryption
  • upcoming btrfs encryption
  • ...

Clevis keeps its metadata in LUKS tokens. If we want to unlock non-LUKS partitions then we need to find a place to store the clevis partition-specific metadata.

anatol avatar Feb 09 '21 17:02 anatol