Re: [CentOS] NBDE, clevis and tang for non-root disk

2018-11-27 Thread Radu Radutiu
On Tue, Nov 27, 2018 at 8:06 PM mark wrote: > Sorry, I think you misunderstood. The key for root is *not* in > /etc/crypttab - that's only for the secondary ones. > > mark > > I understood correctly, just that you mentioning that one can put the key in the /etc/crypttab gave me the idea to ch

Re: [CentOS] NBDE, clevis and tang for non-root disk

2018-11-27 Thread mark
Radu Radutiu wrote: > On Tue, Nov 27, 2018 at 3:14 PM mark wrote: > >> What we do is to have the encryption key of the secondary filesystem in >> /etc/crypttab, which is, of course, 600. As it boots, it decrypts from >> that as it mounts the rest of the system. >> > Thanks, this is working as ex

Re: [CentOS] NBDE, clevis and tang for non-root disk

2018-11-27 Thread Radu Radutiu
On Tue, Nov 27, 2018 at 3:14 PM mark wrote: > What we do is to have the encryption key of the secondary filesystem in > /etc/crypttab, which is, of course, 600. As it boots, it decrypts from > that as > it mounts the rest of the system. > > mark > Thanks, this is working as expected and