LVM LUKS per dropbear entsperren

LVM / LUKS verschlüsselten Linux Server per Dropbear (SSH) entsperren:

Server

Busybox installieren & Netzwerk konfigurieren

apt-get install dropbear busybox

nano /etc/initramfs-tools/initramfs.conf
DEVICE=p2p1
IP=192.168.2.130:::255.255.255.0::p2p1:off

#nach dem kopieren des ssh keys
update-initramfs -u

Workstation

SSH Keys kopieren

ssh-keygen
scp -r .ssh/id_rsa.pub root@HOST://etc/initramfs-tools/root/.ssh/authorized_keys

nano .ssh/config

 Host homeserver
 HostName 192.168.2.130
 User root
 UserKnownHostsFile ~/.ssh/known_hosts.initramfs
 IdentityFile ~/.ssh/id_rsa

Entschlüsselungsscript anlegen

ssh homeserver 

pid=`ps | grep "/scripts/local-top/cryptroot" | cut -d " " -f 3`
kill -9 $pid
sleep 35
/scripts/local-top/cryptroot
pid=`ps | grep "/bin/sh" | cut -d " " -f 3`
kill -9 $pid;

exit

Quellen

http://unix.stackexchange.com/questions/5017/ssh-to-decrypt-encrypted-lvm-during-headless-server-boot

https://www.thomas-krenn.com/de/wiki/Voll-verschlüsseltes-System_via_SSH_freischalten