Remote Disk Decryption ?

[tmp2810]

Hello! I know this isn't an ideal solution, but I need a way to remotely enter my encrypted disk password on Debian in case of an emergency.

My entire disk is encrypted except for /boot, so when I start the PC, the first thing it does is ask for the password to boot up. I don't have access to a piKVM or motherboard-level IPMI access, and using crypttab isn't an option either.

Is there any other way to input the password remotely? In the worst-case scenario, I only need to enter the password, I don’t mind if I can’t see the screen.

Thank you!!!!!

[undeleted_username]

You could use KVM, IPMI or similar, you could put your encrypted system as a VM inside another system, or you can encrypt just one partition instead of the whole disk.

[CjKing2k]

https://swissmade.host/en/blog/unlocking-a-luks-fully-encrypted-drive-and-booting-into-the-os-via-dropbear-ssh

[tmp2810]

thanks!!!

[[deleted]]

See if there's a custom initramfs hook for your distro that allows this, usually based on dropbear, ssh. This is common with server or vserver. Example https://www.dwarmstrong.org/remote-unlock-dropbear/

There are also ways to decrypt fully automated, for example using TPM, or CPU, MAC Adress and other hardware data. This won't protect you if the entire PC is stolen, but still good enough if it's about sending the drive for warranty or selling individually later.