Re: [RFC]: Install rescue-initramfs dialog
On Sun, August 17, 2008 23:02, Per Andersson wrote:
> On Sun, Aug 17, 2008 at 10:37 PM, David Härdeman wrote:
>> Where does the SSH server get the passwords/keyfiles from?
...
> Concerning key files, root's authorized_keys are copied to
> ramdisk if they exist. Riku Voipio has verified that both
> OpenSSH and Dropbear use the same key format for RSA
> keys.
Cool...would it be possible to support a separate file, say
/root/.ssh/authorized_boot_keys so that root can specify one or more keys
that are *only* used for boot ssh access?
And on a related note, did you know that we've added support to cryptsetup
for getting a passphrase from an "external" source? Basically, if the
machine is waiting at the cryptsetup passphrase prompt, you could (using
your ssh-in-initramfs solution) log in and pipe the passphrase to
/lib/cryptsetup/passfifo which would allow the boot to continue. Very
useful on servers or embedded machines :)
--
David Härdeman
Reply to: