https://github.com/dynerose/Remote-unlock-native-ZFS

Unlocking a native encrypted ZFS root partition remotely via Dropbear SSH server on Ubuntu
https://github.com/dynerose/Remote-unlock-native-ZFS

Last synced: 4 days ago
JSON representation

Unlocking a native encrypted ZFS root partition remotely via Dropbear SSH server on Ubuntu

• Host: GitHub
• URL: https://github.com/dynerose/Remote-unlock-native-ZFS
• Owner: dynerose
• License: mit
• Created: 2020-02-15T07:50:49.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2021-08-03T23:08:54.000Z (over 3 years ago)
• Last Synced: 2024-08-02T12:49:59.204Z (3 months ago)
• Language: Shell
• Size: 23.4 KB
• Stars: 28
• Watchers: 2
• Forks: 8
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • License: license

Awesome Lists containing this project

• awesome-starred - dynerose/Remote-unlock-native-ZFS - Unlocking a native encrypted ZFS root partition remotely via Dropbear SSH server on Ubuntu (others)

README

        
Remote-unlock-native-ZFS

Unlocking a native encrypted ZFS root partition remotely via Dropbear SSH server on Ubuntu (19.10, 20.04)

Utility for unattended remote unlock of native ZFS encrypted root disk partition using SSH. 

Requires dropbear SSH server which could be run from initial ramdisk.

Server will be unlocked when SSH is available on the specified IP address and port and if the fingerprint in the known_hosts file matches. 

You should always use IP addresses in the host configuration.

Please also note that the server boot partition type ext (because zfs boot partition not tested yet)

The remote unlock script that I created 

   /usr/share/initramfs-tools/hooks/crypt_unlock.sh

not a nice solution but working.

I accept any ideas and help to make the solution nicer and thank you for it.

License

This software is licensed under MIT license.