5 ms·
Disk encryption is only really practical when you never need to reboot. Found that out the hard way, like most others did at some point :-)
by mlang23 5y ago
Disk encryption is only really practical when you never need to reboot. Found that out the hard way, like most others did at some point :-)
- generalizations 5y agoYup. Can't remote manage a system with encrypted boot disks.
- advisedwang 5y agoSure you can, e.g. https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock https://docs.microsoft.com/en-us/windows/security/informatio... https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption_security-hardening https://access.redhat.com/documentation/en-us/red_hat_enterp... https://wiki.archlinux.org/title/Dm-crypt/Specialties#Remote_unlocking_of_the_root_(or_other)_partition https://wiki.archlinux.org/title/Dm-crypt/Specialties#Remote... etc
- generalizations 5y agoDoesn't look like it. Those are some complex solutions, and I might have missed something, but do note that I said 'boot disk'. From what I can tell, those solutions still have to leave /boot unencrypted, which was my point.