I'm using LUKS, with disks being mounted with crypttab. The keys for the drives are stored on an encrypted USB key, and the key for the encrypted USB key is st

I'm using LUKS, with disks being mounted with crypttab. The keys for the drives are stored on an encrypted USB key, and the key for the encrypted USB key is stored on the root SSD. I wanted something where i could boot unattended, and at the same time i wanted the possibility to destroy the keys and render the disks useless. I have an encrypted backup of the keys, stored outside of the encrypted disk arrays.