yubikey-luks icon indicating copy to clipboard operation
yubikey-luks copied to clipboard

Published 20 hours ago • verified publisher icon cornelinux

Using a detached header

Open whitepj opened this issue 1 year ago • 0 comments

Scenario: Mount luks file using a detached header:

/sbin/cryptsetup --verbose luksOpen --type luks2 --header luksheader.img /dev/loop8 mybackup

Enrolling a yubikey key slot appears to work OK:

yubikey-luks-enroll -d luksheader.img -s 1

However, we cannot actually open the volume with yubikey-luks-open, because we can't currently pass both the header and the volume through to cryptsetup.

whitepj avatar Mar 31 '23 10:03 whitepj