4 ms·
Mandos is pretty cool. Debian and Ubuntu can also embed dropbear into the initramfs so you can ssh in and unlock the disk.
by ryan-c 12y ago
Mandos is pretty cool. Debian and Ubuntu can also embed dropbear into the initramfs so you can ssh in and unlock the disk.
- teddyh 12y agoDropbear (SSH access) still requires you to manually log in and unlock the disks; a primary feature of Mandos is that it can boot completely unattended (unless configured otherwise).
- ryan-c 12y agoYup, I've used Mandos, just stating that there are other options if you don't want automatic.
- teddyh 12y agoMandos can be configured to be not automatic by setting the “approved_by_default” option for a client to “False” in the clients.conf file; See mandos-clients.conf(5): (http://www.recompile.se/mandos/man/mandos-clients.conf.5 http://www.recompile.se/mandos/man/mandos-clients.conf.5). You also need to adjust the “approval_delay” setting.