Re: one keydisk to access multiple encrypted systems

2012-08-29 Thread Erling Westenvik
On Thu, Aug 30, 2012 at 02:31:53AM +1000, Joel Sing wrote: > On Sat, Aug 25, 2012 at 05:08:31PM +0200, Erling Westenvik wrote: > > On Sat, Aug 25, 2012 at 07:03:42AM -0600, Aaron wrote: > > > > > > It is possible if you use different partitions on the same drive, however, > > > you would have to r

Re: one keydisk to access multiple encrypted systems

2012-08-29 Thread Joel Sing
On Sat, Aug 25, 2012 at 05:08:31PM +0200, Erling Westenvik wrote: > On Sat, Aug 25, 2012 at 07:03:42AM -0600, Aaron wrote: > > > > It is possible if you use different partitions on the same drive, however, > > you would have to run -P twice ( once for each volume ). > > > > Sorry for not mention

Re: one keydisk to access multiple encrypted systems

2012-08-27 Thread Jiri B
On Sat, Aug 25, 2012 at 09:54:25AM -0600, Aaron Bieber wrote: > One key disk for multiple machines is impossible from what I > understand. Passphrase fallback is also currently impossible. IIRC Linux cryptsetup has 4 slots you can use for keys. It would be nice if this would be possible on OpenBS

Re: one keydisk to access multiple encrypted systems

2012-08-25 Thread Aaron Bieber
On Sat, Aug 25, 2012 at 06:21:58PM +0200, Erling Westenvik wrote: > On Sat, Aug 25, 2012 at 09:54:25AM -0600, Aaron Bieber wrote: > > I never intended to imply that -P had anything to do with creation. I > > simply meant that you would have to run bioctl with the -P option twice, > > once for each

Re: one keydisk to access multiple encrypted systems

2012-08-25 Thread Erling Westenvik
On Sat, Aug 25, 2012 at 09:54:25AM -0600, Aaron Bieber wrote: > I never intended to imply that -P had anything to do with creation. I > simply meant that you would have to run bioctl with the -P option twice, > once for each partition when changing your passphrase. Does that imply that one may ch

Re: one keydisk to access multiple encrypted systems

2012-08-25 Thread Aaron Bieber
On Sat, Aug 25, 2012 at 05:08:31PM +0200, Erling Westenvik wrote: > On Sat, Aug 25, 2012 at 07:03:42AM -0600, Aaron wrote: > > > > It is possible if you use different partitions on the same drive, however, > > you would have to run -P twice ( once for each volume ). > > > > Sorry for not mention

Re: one keydisk to access multiple encrypted systems

2012-08-25 Thread Erling Westenvik
On Sat, Aug 25, 2012 at 07:03:42AM -0600, Aaron wrote: > > It is possible if you use different partitions on the same drive, however, > you would have to run -P twice ( once for each volume ). > Sorry for not mentioning that I'm aware about the possibility of having several mini partitions on th

Re: one keydisk to access multiple encrypted systems

2012-08-25 Thread Aaron
On Aug 24, 2012 8:48 PM, "Erling Westenvik" wrote: > > According to http://www.undeadly.org/cgi?action=article&sid=20110530221728 > I've set up fully encrypted disk by using the bioctl(4) feature for > specifying a key disk > > # bioctl -C force -c C -l /dev/wd0d -k /dev/sd0d softraid0 > > and i