[opensuse-factory] Mandos in openSUSE
Hello, I was told on the opensuse@opensuse.org list to post this here. Debian GNU/Linux has a program called Mandos, which allows computers with encrypted root filesystem to boot unattended as long as they are in the same LAN segment as the mandos server. If someone steals the computer or copies the storage of an ecrypted VM then they'll still have to enter the password on boot. It needs to install its client in the initrd of the encrypted machine, which is why it only works on Debian GNU/Linux for now. I feel like it would be a great addition to openSUSE GNU/Linux, but it needs a lot of changes in the boot process in order to work. More info about Mandos: https://wiki.recompile.se/wiki/Mandos Regards, mots
On Sunday 2014-11-30 20:15, mots wrote:
I was told on the opensuse@opensuse.org list to post this here.
Debian GNU/Linux has a program called Mandos, which allows computers with encrypted root filesystem to boot unattended as long as they are in the same LAN segment as the mandos server. If someone steals the computer or copies the storage of an ecrypted VM then they'll still have to enter the password on boot.
It needs to install its client in the initrd of the encrypted machine, which is why it only works on Debian GNU/Linux for now.
I feel like it would be a great addition to openSUSE GNU/Linux, but it needs a lot of changes in the boot process in order to work.
dracut has recently gained ssh support: https://github.com/haraldh/dracut/pull/43 Version 042 should be the next one to have it. Since dracut is used by a number of distributions, they will all simultaneously gain the feature when they update. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (2)
-
Jan Engelhardt
-
mots