You can encrypt your servers root filesystem, but need to provide a password during the boot process in order to "unlock" and start the system. This is easy if you have physical access to the server by entering it via keyboard. But if you do not have physical access it's not that easy.

This project is about to set up a server that might be able to have an encryted root filesystem which can be "unlocked" by entering the password via ssh.

A solution for initrd based systems is here (german language):

Looking for hackers with the skills:

dracut

This project is part of:

Hack Week 19

Activity

  • almost 6 years ago: ematsumiya liked this project.
  • almost 6 years ago: holgisms started this project.
  • almost 6 years ago: holgisms added keyword "dracut" to this project.
  • almost 6 years ago: holgisms originated this project.

  • Comments

    • rbranco
      almost 6 years ago by rbranco | Reply

      Related to https://bugzilla.suse.com/show_bug.cgi?id=1141868

    • holgisms
      almost 6 years ago by holgisms | Reply

      Thanks a lot for the link. I ended using dracut-sshd as described there - working! add-emoji

    Similar Projects

    openSUSE on ZoL from OpenZFS project by jkohoutek

    Idea is to have SUSE system with OpenZFS as root FS.

    Why ZFS

    Ways in which ZFS is better than BTRFS

    Main goal

    Have OpenZFS as install option in the installer and utilize zedenv Boot Environment Manager for SUSE updates install

    Goals

    • synergy of ZFS with dracut, so snapshots are correctly added to the grub
    • synergy of zedenv with zypper
      • before every update snapshot is created
      • when new kernel or other package which requires reboot is about to be installed, the update will be processed to the new boot environment snapshot and grub configuration changed to boot to this new one
    • integrate Root on ZFS as install option to the YaST
    • configure Kiwi for the ZFS install images

    Completed goals

    • prepare ZFS pool compatible with openSUSE installation ✓
    • install openSUSE with root on ZFS ✓
    • boot to the prepared and installed system ✓

    Current progress

    Resources: