On 19/06/2008 Sam Morris wrote: > On Thu, 2008-06-19 at 14:37 +0200, Jonas Meurer wrote: > > On 20/05/2008 David Härdeman wrote: > > > Wouldn't it be a solution to reverse the dependency so that /home uses a > > > key derived from swap's key? > > > > Sam, could you comment on this suggestion? > > I guess it's possible, but I haven't had time to test it out since I > don't know how to switch to it without doing a backup/restore cycle. > > I'd also like to add an additional key to the home device so that if I > screw up my swap partition, the home partition is also not destroyed... > the output of 'cryptsetup luksDump' implies that this is possible but I > don't know if doing so will interfere with cryptsetup, etc.
If you're talking about luks devices, 'cryptsetup luksAddKey' is your friend. One of the biggest advantages of LUKS over plain dm-crypt is that it supports more than one keys, where key may either be a passphrase or a keyfile. See the cryptsetup manpage for more information, or feel free to ask if any questions remain. greetings, jonas -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
