1

Unlocking local storage at boot

posted
by
Avatar
rotten777@alien.topB
in
Avatar
homelab@selfhosted.forum
7 comments
hidereport

I’m trying to build a headless server that has sensitive data on it and needs full disk encryption. I want it protected from physical theft and as far as I can brainstorm, that means at boot, the storage has to be unlocked manually. I know I can do this with remote access through remote console IPMI board but was wondering if I’ve just missed a way to solve this problem without using extra hardware. Have any of you homelabbers dealt with this problem set without using IPMI cards?

Sort:
HotTopControversialNewOld
You are viewing a single thread.
View all comments
Avatar
roiki11@alien.topB
1 point

Depends what you want to do, there are a few alternatives for luks. TPM, nbde server, dropbear-ssh, usb key, yubikey.

You can use any combination of the above with password being a fallback.

permalink
report
reply
Avatar
rotten777@alien.topOPB
1 point

dropbear-ssh is what I’m looking for. thanks!

permalink
report
parent
reply

Homelab

!homelab@selfhosted.forum

Create post

Rules

  • Be Civil.
  • Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
  • No memes or potato images.
  • We love detailed homelab builds, especially network diagrams!
  • Report any posts that you feel should be brought to our attention.
  • Please no shitposting or blogspam.
  • No Referral Linking.
  • Keep piracy discussion off of this community

Community stats

  • 9

    Monthly active users

  • 1.4K

    Posts

  • 6K

    Comments

Community moderators