better-initramfs
better-initramfs copied to clipboard
Support for keys on external device
This patch adds support for storing encryption keys on external devices. It's fairly trivial and seems to work for me, but I haven't done extensive testing.
Thanks for the patch.
Note to self:
I do wonder whatever encdelay should be used or rootdelay which already do something like it be used. Also I think I would add enc_dev option to search for specified filename on every device, like liveCDs search for squashfs images. Next it should support remote unlock via askpass, and if keyfile is not found it should fallback to asking for password.
@Samuel, I hope you will be fine if I keep this pull request open/not-merged for little longer until I decide whatever merge it as-is or until I deliver reworked features. I already have image of how I would like it to work in my mind so it shoudn't take too long.
Hi,
fwiw I haven't forgot about this pull request.
Still wondering how I should handle header and key with multiple luks devices that enc_root= does support.