Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #185122

Re: customizing systemd config

Show all headers | View raw

On Fri, Aug 11, 2017 at 07:04:54PM +0200, Christian Seiler wrote:
> Hi there,
> 
> On 08/11/2017 04:42 AM, Gregory Seidman wrote:
> > I'm trying to recreate under systemd something I had previously cobbled
> > together with shell scripts and init levels under sysvinit.
> > 
> > Only a few services ran under init 2, the default set in /etc/inittab,
> > including privoxy and ssh; the rest of the services I wanted running, such
> > as fetchmail, exim4, courier-imap, apache2, etc. would be started at init
> > level 3. Those services required an encrypted volume (actually a RAID that
> > was an encrypted LVM PV for a VG with several volumes) to be configured and
> > mounted before they could be started.
> 
> I've blogged about this very scenario a while back:
> https://blog.iwakd.de/headless-luks-decryption-via-ssh
> 
> Note that I wrote that mainly to explain some details about
> systemd using a specific example, I personally am not actually
> using that kind of setup. For a headless server of mine I use
> full disk encryption (LUKS) for everything except /boot and
> unlock the entire system in the initramfs. I also mention that
> approach in my blog post, but wanted to stress it here again
> because I think that the initramfs-based decryption is the
> better way to do this. For that alternative take a look at:
> https://projectgus.com/2013/05/encrypted-rootfs-over-ssh-with-debian-wheezy/

This not only gave me the understanding I was looking for, but a
new perspective on it as well. Thank you!

> Regards,
> Christian
--Greg

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

customizing systemd config Gregory Seidman <gsslist+debian@anthropohedron.net> - 2017-08-11 05:10 +0200
  Re: customizing systemd config Christian Seiler <christian@iwakd.de> - 2017-08-11 19:30 +0200
    Re: customizing systemd config Gregory Seidman <gsslist+debian@anthropohedron.net> - 2017-08-13 17:10 +0200
      Re: customizing systemd config Fungi4All <fungilife@protonmail.com> - 2017-08-13 23:40 +0200

csiph-web