Score:0

Mounting an encrypted fs WITH prompt at boot time (LUKS, cryptsetup)

bd flag

Per company policy my laptop has to be very secure in case of theft, so I have created an encrypted partition (LUKS) that I want to mount via /etc/fstab.

However, I do NOT want to add passphrase to the volume or use a key file (e.g. per Auto mount encrypted partition using fstab without key prompts), because I feel this is less secure than typing the passphrase at boot time.

I want to be asked for the passphrase at boot, the OS remembering it and automounting the volume (/homeenc in my case) during the boot so that I can log in at once to my user account with home dir located on that encrypted volume (say /homeenc/example_user).

While there's plenty of information on the web of how to automount LUKS device without entering password at boot, I can't find info on how to configure above.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.