The setup for unlocking an encrypted volume during boot using (only) a keyfile (on a detachable USB drive) usually calls for a keyscript to be specified as one of the encrypted volume’s options. But with systemd, such encrypted volumes can only be unlocked during boot by typing in a passphrase.<\/p>\n
Steps to reproduce:
\n1. Have a LUKS encrypted volume.
\n2. Have said volume specified in \/etc\/crypttab, with keyscript= option pointing to your script for outputting the unlocking key.
\n3. Boot.<\/p>\n
What I expect to happen:
\nTo have the volume unlocked by the script at boot time without manual intervention.<\/p>\n
What happens instead:
\nPlymouth shows a prompt to enter a valid passphrase for the volume.<\/p>\n
Workarounds:
\nApparently the options for unlocking encrypted drives, including keyscript, can also be specified at the kernel command-line, without crypttab, and according to yaantc at Hacker News [1] this can be used to work around the issue. I haven’t personally tried this.<\/p>\n
* [1]\u00a0https:\/\/news.ycombinator.com\/item?id=8477913<\/p>\n","protected":false},"excerpt":{"rendered":"
With systemd, encrypted volumes with a key on a USB drive can only be unlocked during boot by typing in a passphrase.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8860],"tags":[12646],"class_list":["post-4736","post","type-post","status-publish","format-standard","hentry","category-vianhallintajarjestelmat","tag-systemd","sijainti-launchpad"],"_links":{"self":[{"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/posts\/4736","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/comments?post=4736"}],"version-history":[{"count":4,"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/posts\/4736\/revisions"}],"predecessor-version":[{"id":4740,"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/posts\/4736\/revisions\/4740"}],"wp:attachment":[{"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/media?parent=4736"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/categories?post=4736"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mummila.net\/kommentit\/wp-json\/wp\/v2\/tags?post=4736"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}