From 173edca09e9e59e762abf8723789e04dd31e87df Mon Sep 17 00:00:00 2001 From: =?utf8?q?Amadeusz=20=C5=BBo=C5=82nowski?= Date: Tue, 31 Jul 2012 12:23:18 +0200 Subject: [PATCH] dracut.cmdline.7: add NOTE about how dracut pipes key to cryptsetup --- dracut.cmdline.7.asc | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/dracut.cmdline.7.asc b/dracut.cmdline.7.asc index 0b1b8a2..884b223 100644 --- a/dracut.cmdline.7.asc +++ b/dracut.cmdline.7.asc @@ -233,6 +233,29 @@ rd.luks.key=/foo/bar.key ---- + As you see, you can skip colons in such a case. ++ +[NOTE] +=============================== +Dracut pipes key to cryptsetup with _-d -_ argument, therefore you need to pipe +to crypsetup luksFormat with _-d -_, too! + +Here follows example for key encrypted with GPG: + +---- +gpg --quiet --decrypt rootkey.gpg \ +| cryptsetup -d - -v \ +--cipher serpent-cbc-essiv:sha256 \ +--key-size 256 luksFormat /dev/sda3 +---- + +If you use plain keys, just add path to _-d_ option: + +---- +cryptsetup -d rootkey.key -v \ +--cipher serpent-cbc-essiv:sha256 \ +--key-size 256 luksFormat /dev/sda3 +---- +=============================== MD RAID ~~~~~~~ -- 2.7.4