Post #4455635
2026-08-01 02:42 UTC
If it’s a server for self hosting you definitely don’t want anything that requires interaction at boot.
There’s a project that allows unlocking LUKS with a decryption key retrieved from another machine in your network. I don’t recall the name but someone hopefully will.
The idea is that put the key on, say, a raspberry pi zero w that you hide somewhere in your house so that if someone steals your server they don’t have the key.
Replies (3)
-
@esc@piefed.social 2026-08-01 03:44
tang
-
@modem_down@thebrainbin.org 2026-08-01 08:12
If it's a server for self hosting you definitely don't want anything that requires interaction at boot. Depends on use-case. If you only plan to boot it when you're physically present, it's fine.
-
@percent@infosec.pub 2026-08-02 04:25
My servers require manual unlock via SSH at boot. It has been great for years.