Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to setup yubikey-luks-enroll for single-volume or LVM-Volume encryption? #89

Open
typoworx-de opened this issue May 16, 2023 · 1 comment

Comments

@typoworx-de
Copy link

I followed this tutorial trying to use it for LVM volume to be setup as luks-encrypted volume with Yubikey:
https://deisi.github.io/posts/luks_mi_yubikey/

I stucked when I noticed yubikey-luks-enroll tries to access /dev/sda3 by default. I'm also somehow shocked for some reason this tool tries to access /dev/sda3 without given explicit reason to do so. My machine even has no sda3 at all on the one hand and on the other hand such a tool should not assume such things, when mistakes could lead to data-loss!

But back to main question, how can I use this to decrypt single-volume by device? This would also be a use-case for luks+yubikey encrypted external USB-Drives for example.

@typoworx-de
Copy link
Author

typoworx-de commented May 16, 2023

sudo yubikey-luks-enroll -d /dev/mapper/lvm--disk-encrypted--data seems to work, but for now it only works with password not Yubikey?!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant