You can encrypt your servers root filesystem, but need to provide a password during the boot process in order to "unlock" and start the system. This is easy if you have physical access to the server by entering it via keyboard. But if you do not have physical access it's not that easy.
This project is about to set up a server that might be able to have an encryted root filesystem which can be "unlocked" by entering the password via ssh.
A solution for initrd based systems is here (german language):
Looking for hackers with the skills:
This project is part of:
Hack Week 19
Activity
Comments
Similar Projects
openSUSE on ZoL from OpenZFS project by jkohoutek
Idea is to have SUSE system with OpenZFS as root FS.
Why ZFS
Ways in which ZFS is better than BTRFS
Main goal
Have OpenZFS as install option in the installer and utilize zedenv Boot Environment Manager for SUSE updates install
Goals
- synergy of ZFS with dracut, so snapshots are correctly added to the grub
- synergy of zedenv with zypper
- before every update snapshot is created
- when new kernel or other package which requires reboot is about to be installed, the update will be processed to the new boot environment snapshot and grub configuration changed to boot to this new one
- integrate Root on ZFS as install option to the YaST
- configure Kiwi for the ZFS install images
Completed goals
- prepare ZFS pool compatible with openSUSE installation ✓
- install openSUSE with root on ZFS ✓
- boot to the prepared and installed system ✓
Resources: