Unlocking local storage at boot (alien.top)

submitted 11 months ago by rotten777@alien.top to c/homelab@selfhosted.forum

7 comments fedilink hide all child comments

I'm trying to build a headless server that has sensitive data on it and needs full disk encryption. I want it protected from physical theft and as far as I can brainstorm, that means at boot, the storage has to be unlocked manually. I know I can do this with remote access through remote console IPMI board but was wondering if I've just missed a way to solve this problem without using extra hardware. Have any of you homelabbers dealt with this problem set without using IPMI cards?

you are viewing a single comment's thread
view the rest of the comments

[-] roiki11@alien.top 1 points 11 months ago

Depends what you want to do, there are a few alternatives for luks. TPM, nbde server, dropbear-ssh, usb key, yubikey.

You can use any combination of the above with password being a fallback.

[-] rotten777@alien.top 1 points 11 months ago

dropbear-ssh is what I'm looking for. thanks!

this post was submitted on 22 Nov 2023

1 points (100.0% liked)

Homelab

371 readers

2 users here now

Rules

Be Civil.
Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
No memes or potato images.
We love detailed homelab builds, especially network diagrams!
Report any posts that you feel should be brought to our attention.
Please no shitposting or blogspam.
No Referral Linking.
Keep piracy discussion off of this community

founded 1 year ago

MODERATORS

communick@selfhosted.forum

rglullis@communick.news