Systemd Now Can Unlock Encrypted Boot Drives Using An External Password File

[phoronix]

Phoronix: Systemd Now Can Unlock Encrypted Boot Drives Using An External Password File

Merged today into systemd is basic keydev support for cryptsetup-generator to allow unlocking an encrypted drive by using a key file that is stored on an external drive...

http://www.phoronix.com/scan.php?page=news_item&px=systemd-cryptsetup-keydev

[ElectricPrism]

We're here boys.

[mbello]

I really wish for support to http-download of the key file from a url.
The server I run has an encrypted partition where I place certain VMs and the keyfile to that partition is stored in the cloud.

[mskarbek]

I really wish for support to http-download of the key file from a url.
The server I run has an encrypted partition where I place certain VMs and the keyfile to that partition is stored in the cloud.

Check Clevis and Tang: https://github.com/latchset/clevis, https://github.com/latchset/tang.

[sireangelus]

I really wish for support to http-download of the key file from a url.
The server I run has an encrypted partition where I place certain VMs and the keyfile to that partition is stored in the cloud.

What's the point? if anyone takes the drives can take the http reference and obtain the key. God all they have to do is to intercept your traffic.
.