yubikey-luks icon indicating copy to clipboard operation
yubikey-luks copied to clipboard

How to setup yubikey-luks-enroll for single-volume or LVM-Volume encryption?

Open typoworx-de opened this issue 1 year ago • 1 comments

I followed this tutorial trying to use it for LVM volume to be setup as luks-encrypted volume with Yubikey: https://deisi.github.io/posts/luks_mi_yubikey/

I stucked when I noticed yubikey-luks-enroll tries to access /dev/sda3 by default. I'm also somehow shocked for some reason this tool tries to access /dev/sda3 without given explicit reason to do so. My machine even has no sda3 at all on the one hand and on the other hand such a tool should not assume such things, when mistakes could lead to data-loss!

But back to main question, how can I use this to decrypt single-volume by device? This would also be a use-case for luks+yubikey encrypted external USB-Drives for example.

typoworx-de avatar May 16 '23 12:05 typoworx-de

sudo yubikey-luks-enroll -d /dev/mapper/lvm--disk-encrypted--data seems to work, but for now it only works with password not Yubikey?!

typoworx-de avatar May 16 '23 13:05 typoworx-de