Web lists-archives.com

Re: system drive encryption question




-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Apr 05, 2017 at 05:31:38PM -0600, FHDATA wrote:
> 
> 
> hello,
> 
> I am not currently using debian as linux OS but
> considering it ...
> 
> 
> If I clean install debian (latest of course) and during
> the install process have  its / (system drive)
> encrypted with pass-phrase ....
> 
> then later on, can I add a key, residing on
> a usb flash drive,  to that encryption?

I assume the encryption will be LUKS based (the default here). LUKS
supports several key slots (8 if I remember correctly), and cryptsetup's
man page mentions a luksAddKey command, so it should be possible.

I haven't tried it myself yet, though.

Regards
- -- tomás
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAljl5cwACgkQBcgs9XrR2kbgHgCfXHiAR6e20YFiQVF/GEsFFGFZ
JvIAmQG0rGx5bPXpPHZNbCYLniXw5yuO
=2wzk
-----END PGP SIGNATURE-----