Re: howto remote unlock encrypted root fs

2012-06-21 Thread Daniel Kahn Gillmor
(please trim quoted replies to a sensible length by only containing relevant bits!) On 06/15/2012 10:43 AM, Richard Ray wrote: > Got it. Changed line 30 in file > /usr/share/initramfs-tools/hooks/dropbear from > cp /lib/libnss_* "${DESTDIR}/lib/" > to > cp /lib/arm-linux-gnueabi/libnss_* "${DESTDI

Re: howto remote unlock encrypted root fs

2012-06-15 Thread Richard Ray
On Fri, 15 Jun 2012, Richard Ray wrote: On Fri, 15 Jun 2012, Nebojša Ćosić wrote: On Fri, 15 Jun 2012, Bj?rn Wetterbom wrote: Have you executed "update-initramfs -u" after adding the key to authorized_keys? Yes and to be sure I opened the new ramdisk to make sure. On Fri, Jun 15, 20

Re: howto remote unlock encrypted root fs

2012-06-15 Thread Richard Ray
On Fri, 15 Jun 2012, Nebojša Ćosić wrote: On Fri, 15 Jun 2012, Bj?rn Wetterbom wrote: Have you executed "update-initramfs -u" after adding the key to authorized_keys? Yes and to be sure I opened the new ramdisk to make sure. On Fri, Jun 15, 2012 at 12:33 PM, kqt4a...@gmail.com wrote:

Re: howto remote unlock encrypted root fs

2012-06-15 Thread Richard Ray
On Fri, 15 Jun 2012, Nebojša Ćosić wrote: On Fri, 15 Jun 2012, Bj?rn Wetterbom wrote: Have you executed "update-initramfs -u" after adding the key to authorized_keys? Yes and to be sure I opened the new ramdisk to make sure. On Fri, Jun 15, 2012 at 12:33 PM, kqt4a...@gmail.com wrot

Re: howto remote unlock encrypted root fs

2012-06-15 Thread Nebojša Ćosić
> On Fri, 15 Jun 2012, Bj?rn Wetterbom wrote: > > > Have you executed "update-initramfs -u" after adding the key to > > authorized_keys? > > > > Yes and to be sure I opened the new ramdisk to make sure. > > > > > > On Fri, Jun 15, 2012 at 12:33 PM, kqt4a...@gmail.com > > wrote: > > > >> I hav

Re: howto remote unlock encrypted root fs

2012-06-15 Thread kqt4a...@gmail.com
On Fri, 15 Jun 2012, Bj?rn Wetterbom wrote: There has been a nasty bug around for quite some time that made a lot of users run flash-kernel manually to actually flash the new ramdisk (Martin Michlmayr has written extensively about it on this list). I am not sure if the bug is fixed or even if it

Re: howto remote unlock encrypted root fs

2012-06-15 Thread Richard Ray
On Fri, 15 Jun 2012, Eric Cooper wrote: On Fri, Jun 15, 2012 at 05:33:07AM -0500, kqt4a...@gmail.com wrote: [...] Everything seems to be working as described except dropbear will not accept publickey authentication and ask for a password. The authorized_keys file contains public keys that I kno

Re: howto remote unlock encrypted root fs

2012-06-15 Thread kqt4a...@gmail.com
On Fri, 15 Jun 2012, Bj?rn Wetterbom wrote: Have you executed "update-initramfs -u" after adding the key to authorized_keys? Yes and to be sure I opened the new ramdisk to make sure. On Fri, Jun 15, 2012 at 12:33 PM, kqt4a...@gmail.com wrote: I have a Gurplug running Wheezy from a usb h

Re: howto remote unlock encrypted root fs

2012-06-15 Thread Eric Cooper
On Fri, Jun 15, 2012 at 05:33:07AM -0500, kqt4a...@gmail.com wrote: > [...] Everything seems to be working as described except dropbear > will not accept publickey authentication and ask for a password. The > authorized_keys file contains public keys that I know work. Are you sure the authorized_k

howto remote unlock encrypted root fs

2012-06-15 Thread kqt4a...@gmail.com
I have a Gurplug running Wheezy from a usb harddrive with an encrypted root fs. No problems there. I am trying to get remote unlocking set up as described in /usr/share/doc/cryptsetup/README.remote.gz. Everything seems to be working as described except dropbear will not accept publickey authent