filmov
tv
How to encrypt a drive and mount it automatically at boot / no prompt

Показать описание
Mount an encrypted drive at boot with no interaction needed and no password prompt.
The key is secured in my root partition which is encrypted because my whole disk is encrypted.
The purpose of this video is to encrypt a secondary storage drive and automatically mount it at startup with no password needed.
Therefore the security rely on the fact that this key is in an encrypted partition(could also be your home folder) and only root can read it.
This why I recommend to encrypt the disk where the generated key will be stored.
IF someone steal only the secondary drive (our databank), he would have nothing.
IF someone would steal ALL drives and your key was created on an encrypted partition, he would have nothing.
IF someone would steal ALL drives and that your key was NOT created on an encrypted partition, he would have everything in the drive IF he is smart.
This is why I full encrypt all my installs(there is almost no performance cost and I never had a problem). It will greatly benefit your Opsec while being practical.
Commands used:
Server OS: Ubuntu 22.04
Music:"Karl Casey @ White Bat Audio"
The key is secured in my root partition which is encrypted because my whole disk is encrypted.
The purpose of this video is to encrypt a secondary storage drive and automatically mount it at startup with no password needed.
Therefore the security rely on the fact that this key is in an encrypted partition(could also be your home folder) and only root can read it.
This why I recommend to encrypt the disk where the generated key will be stored.
IF someone steal only the secondary drive (our databank), he would have nothing.
IF someone would steal ALL drives and your key was created on an encrypted partition, he would have nothing.
IF someone would steal ALL drives and that your key was NOT created on an encrypted partition, he would have everything in the drive IF he is smart.
This is why I full encrypt all my installs(there is almost no performance cost and I never had a problem). It will greatly benefit your Opsec while being practical.
Commands used:
Server OS: Ubuntu 22.04
Music:"Karl Casey @ White Bat Audio"
Комментарии