howdy icon indicating copy to clipboard operation
howdy copied to clipboard

Unlock luks2 encrypted root partition ??

Open rexackermann opened this issue 6 months ago • 4 comments

I have a feeling it's a bit too complicated. But unlocking the luks root drive with face will be really convenient.

Thanks for the awesome project. Took a while to get things working(my fault for not reading the doc properly), but it feels really nice to use now.

rexackermann avatar Jun 28 '25 18:06 rexackermann

It will make initramfs.img very big, I think.

edward-p avatar Aug 29 '25 04:08 edward-p

I think the bigger concern is how the actual decryption key would be stored and where.

rexackermann avatar Aug 29 '25 10:08 rexackermann

I think the bigger concern is how the actual decryption key would be stored and where.

Maybe just use TPM device to decrypt luks automatically? Then enable the secure boot. Howdy just acts as the auth method of your system.

edward-p avatar Sep 04 '25 09:09 edward-p

I guess it's kinda pointless to get howdy there since it's adding nothing to the security...

I think the bigger concern is how the actual decryption key would be stored and where.

Maybe just use TPM device to decrypt luks automatically? Then enable the secure boot. Howdy just acts as the auth method of your system.

rexackermann avatar Oct 20 '25 07:10 rexackermann