4 ms·

Not if grub is encrypted, better even behind FDE.

• justaj 9y ago
  How does booting for remote login in such a setup work though? You'd have to be physically present in order to enter the passphrase.
  • arca_vorago 9y ago
    For that I do an ssh shim at initram (with portknocking) for key entry preboot
    • amdavidson 9y ago
      I would love to read a tutorial on that if you know of one.
      • rthille 9y ago
        https://hamy.io/post/0005/remote-unlocking-of-luks-encrypted-root-in-ubuntu-debian/ https://hamy.io/post/0005/remote-unlocking-of-luks-encrypted...