Dropbear-initramfs ssh remote login

Asked by Richard Maher

I have two encrypted disks, (system and data). They both have the same unlock key. Without adding the 'initramfs' hook to the second (data) disk entry within /etc/crypttab and when logging in at the console, Debian Bookworm only asks for the password once, for the system disk and then also unlocks the data disk without having to enter the same key again. However this does not work when using dropbear-initramfs for remote login and it is necessary to add initramfs hook to the data disk entry within crypttab so the unlock prompt is received twice for the same key to be entered twice.

Only entering the password once where keys are common is preferred behaviour for logging in remotely too.

Also, can consideration be given to adding this https://github.com/stcz/initramfs-tools-network-hook into the standard package to provide support for machines connected to trunk (tagged) ports. It works as is with Debian 12.4.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu dropbear Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Richard Maher (echogolf) said :
#1

I solved part one of my question by adding 'keyscript=decrypt_keyctl' to my crypttab entries which caches the password for use with later entries. :-)

Revision history for this message
actionparsnip (andrew-woodhead666) said :
#2

This is Ubuntu support only. You need the Debian forum here
https://forums.debian.net/

Can you help with this problem?

Provide an answer of your own, or ask Richard Maher for more information if necessary.

To post a message you must log in.