Re: encrpyt harddrive without passphrase/userinput

[Lothar Ketterer <superapotheker@m-air.de>]

Hi Mario,

On Sun, 26 Feb 2006, Mario Ohnewald wrote:

> > > a) it must be able to boot (remotely) without userinput/passphrase
> > > b) the importtant partitions such as /etc, /var, /usr and /home must be
> > > encrypted/protected.

I think the problem will be that you cannot put /etc outside of the root
partition. This means that you cannot boot "normally" and read the
secret from somewhere on the net.

> Maybe someone has some cool ideas, too.

Just a thought without being able to exactly tell how to realize this:
boot from CD, read the key/passphrase via network, mount the (encrypted)
root partition and chroot to it?

Regards,
Lothar