On Fri, Jan 22, 2016 at 06:56:15PM +0100, Anders Andersson wrote: > On Fri, Jan 22, 2016 at 5:09 PM, Jonathan Dowland <j...@debian.org> wrote: > > 2. vgchange -a y <relevant VG name> ... > I guess having a separate unit for this could be nice, but is it > really necessary? Having used LVM on top of LUKS, I can't recall > having to do that step manually.
It might be something to do with my LVM configuration. I had a hint elsewhere that lvmetad might address this, so I'll explore that. > > [2] I am planning to investigate having a dropbear sshd running in the > > initramfs environment in the future, so I can do an ssh-in to decrypt > > the filesystems, including /, but I haven't looked at this yet. There > > are several dracut modules that seem to do it. > > I do this on one machine, haven't decided if I'm happy with the setup > or not. There are too many issues with systemd+encryption in Jessie > right now. Good to know, thanks! Since writing that I see that the Debian cryptsetup package seems to have optional initramfs hooks so I wouldn't need to swap to dracut after all. I may take another look at that when I have more time. -- Jonathan Dowland Please do not CC me, I am subscribed to the list.
