1

LUKS storing keyfile in encrypted usb drive

view story
linux-howto

http://unix.stackexchange.com – I already asked once about LUKS unlocking of multiple HDDs in Linux: LUKS and multiple hard drives. Now I would like to know how to secure store the keyfile used for the automatic unlock of the associated partitions. My plan is (if possible): Encrypt a small USB drive with LUKS that requires a passphrase Unlock it at boot as the first drive by using the passphrase Mount it to a given mount point, for instance /test (is this possible ?) Now the keyfile can be safely read: /test/keyfile Use the keyfile to unlock other drives without needing to ask password for them LuksClose the USB drive in (HowTos)