Re: system drive encryption question
- Date: Thu, 6 Apr 2017 08:53:00 +0200
- From: <tomas@xxxxxxxxxx>
- Subject: Re: system drive encryption question
-----BEGIN PGP SIGNED MESSAGE-----
On Wed, Apr 05, 2017 at 05:31:38PM -0600, FHDATA wrote:
> I am not currently using debian as linux OS but
> considering it ...
> If I clean install debian (latest of course) and during
> the install process have its / (system drive)
> encrypted with pass-phrase ....
> then later on, can I add a key, residing on
> a usb flash drive, to that encryption?
I assume the encryption will be LUKS based (the default here). LUKS
supports several key slots (8 if I remember correctly), and cryptsetup's
man page mentions a luksAddKey command, so it should be possible.
I haven't tried it myself yet, though.
- -- tomás
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
-----END PGP SIGNATURE-----