I have a patch for decrypt_keyctl enabling it to work from an ssh session; how to submit?
I setup my hosts so that root is unencrypted, but swap, home, and some service specific directories are on encrypted partitions (mariadb, Nextcloud, burp, etc.). On reboot I ssh into the system, open the encrypted devices, mount the relevant devices, and start the services that depend on them (all scripted of course).
Something I struggled with for a long time (years) was that decrypt_keyctl doesn't work reliably or at all from an ssh session where I've su'd to root. Eventually, with much research, I was able to patch decrypt_keyctl to enable that scenario to work.
How can I contribute this modification to the decrypt_keyctl script?
Thanks,
Jonathan
Question information
- Language:
- English Edit question
- Status:
- Answered
- Assignee:
- No assignee Edit question
- Last query:
- Last reply:
Can you help with this problem?
Provide an answer of your own, or ask Jonathan for more information if necessary.