Re: [CentOS] remote disk decryption on centos?

Am 12.03.21 um 22:51 schrieb ept8ept8@secmail.pro:

...

Hi I was reading about how unlock encrypted root partition from remote (unattended). I'd like asking what is compatible way for this in centos and commonly used by administrators?

I think most simple is install dropbear in initramfs for allow remote SSH and manual enter passphrase. I find many HOWTO for that on debian/ubuntu, but nothing for centos.

Is there any help, recommend or HOWTO available for centos?

https://github.com/gsauthof/dracut-sshd

Thanks Leon!

Is this what you're looking for?

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption_security-hardening

Thanks Barry. I thinking would be easiest using SSH. This is more complex but a good solution.

Can both solutions be used together? So if automatic boot cant find Tang server and cant boot, I can SSH to enter manual password?