Comments on: Installing Debian 8 (Jessie) with LUKS Encrypted /home and /var Partitions

By: Ivan

Ivan — Tue, 21 Mar 2017 09:39:03 +0000

hi guys

i want to know how to make passpshrase to automaticaly boot from usb.

By: Graham

Graham — Tue, 13 Dec 2016 01:12:14 +0000

Yeah, I’m not convinced automatic decryption works in Debian. If you issue ‘update-initramfs -u -k all’ you get the error, ‘cryptsetup: WARNING: target sdaX_crypt uses a key file, skipped.’ which will hang the system at boot.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776409

They’re dicking around with systemd and can’t get it sorted out so it isn’t clear if you can use a keyscript in Jessie/Stable.

By: Matei Cezar

Matei Cezar — Sun, 31 Jul 2016 12:23:23 +0000

In reply to Jim Braxton.

That’s just a simple trick used to decrypt the partitions. I wouldn’t suggest that you should host the key on any of internal hard-disks but you can use an external drive to keep the key secure and plug the drive.

By: Jim Braxton

Jim Braxton — Fri, 29 Jul 2016 16:24:14 +0000

>All sensitive data stored in /home and /var partitions will be highly secured in case someone gains physical access to your machine hard-drive.

I’m sorry, how exactly is it gonna be secured from anyone when we’ve just configured these partitions to be mounted automatically without asking the passphrase so anyone will be able to login on our machine and read all the data from these partitions?

By: Matei Cezar

Matei Cezar — Tue, 21 Jun 2016 14:46:21 +0000

If you can boot-up and login to the console check if the / partition is present on fstab (i’m guessing the root partition is not encrypted). Then update the initramfs image with the command ‘update-initramfs -u’