Luks disk encryption

balaji2219@gmail.com · 08-06-2014, 12:37 AM

Hi,
I need to configure encrypted disk on RHEL6, but the key should be stored on the network server/database, encrypted disk should get decyrpted during boot or after boot using this key and without asking any passphrase.
Any help or article is highly appreciated.
Regards,
Balaji.

mostlyharmless · 08-06-2014, 02:47 PM

During boot might be a bit tricky, after boot just make sure the network server has a mountable drive, say nfs, with the keyfile on it. Make sure the nfs drive is mounted first, then have the luksOpen command have the keyfile referenced to the network drive.

Hope that helps

[EDIT] Something like this: http://www.howtoforge.com/automatica...with-a-keyfile

but instead of "/root/keyfile" use /{place where you mounted the network drive}/keyfile so if your fstab has server's nfs drive mounted under /mnt/nfserver, then "/mnt/nfserver/keyfile"

szboardstretcher · 08-06-2014, 02:51 PM

fyi: Your request, this setup, is not secure in any way.

Do what you need to do, but realize it isn't secure.