How to make encryped Manjaro unlockable with usb flash drive?


#1

I have recently installed Manjaro : 17.0.5 with LUKS encryption of over all system.
Computer runs UEFI.
As far as I understand the system is unlocked twice 1 time /boot partition with GRUB loader, and 2 time / root partition. Root partition is automatically unlocked with /crypto_keyfile.bin, so 2 time user is not asked to enter passphrase. Right?

I need help to

  1. make /boot unlockable with crypto_keyfile.bin stored on USB flash drive.
  2. make / root unlockable with crypto_keyfile.bin stored on USB flash drive, so I am able to move/remove /crypto_keyfile.bin from root partition.

Thanks :slight_smile:


#2

You may be interested in this section of Arch wiki:

https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption#Keyfiles


#3

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.