Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #232464

Onion on boot to remotely unlock root partition

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hello, I'm new to this list!

With software like dropbear-initramfs, cryptsetup-initrafs and others
you can remotely unlock a booting Debian that has a LUKS-encrypted root
partition.

That is possible because it runs a SSH server in its unencrypted boot
partition which gives you basic remote access. That basic access is
enough to enter the unlocking passphrase which will let the encrypted
system boot.

That works great, but you need a public static address or DDNS and port
redirection.

I would like to have an onion service running in the boot partition too,
that way I could do the same without caring about addresses, ports or
names. And would add privacy too.

How could I make it?

Any advise, suggestion or step-by-step guide would be very much welcome,
but please keep in mind that I am not a developer.

Thank you very much!

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Onion on boot to remotely unlock root partition Amuza en Hackea <amuza@hackea.org> - 2021-03-07 01:00 +0100
  Re: Onion on boot to remotely unlock root partition deloptes <deloptes@gmail.com> - 2021-03-07 01:40 +0100
  Re: Onion on boot to remotely unlock root partition Celejar <celejar@gmail.com> - 2021-03-07 02:10 +0100

csiph-web