yubikey-luks
yubikey-luks copied to clipboard
How to setup yubikey-luks-enroll for single-volume or LVM-Volume encryption?
I followed this tutorial trying to use it for LVM volume to be setup as luks-encrypted volume with Yubikey: https://deisi.github.io/posts/luks_mi_yubikey/
I stucked when I noticed yubikey-luks-enroll
tries to access /dev/sda3 by default. I'm also somehow shocked for some reason this tool tries to access /dev/sda3 without given explicit reason to do so. My machine even has no sda3 at all on the one hand and on the other hand such a tool should not assume such things, when mistakes could lead to data-loss!
But back to main question, how can I use this to decrypt single-volume by device? This would also be a use-case for luks+yubikey encrypted external USB-Drives for example.
sudo yubikey-luks-enroll -d /dev/mapper/lvm--disk-encrypted--data
seems to work, but for now it only works with password not Yubikey?!