Mount a LUKS partition at boot
I have installed an Ubuntu machine with two encrypted LUKS partitions: one for /
and one for /home
.
I've reinstalled the machine to upgrade to 10.04. Again, the /
is installed using LUKS, and I'm able to mount the /home
using:
mkdir /media/home
sudo cryptsetup luksOpen /dev/sda2 home
sudo mount -t ext3 /dev/mapper/home /media/home
The problem is, this cryptfs mapper disappears after boot, so I putting the appropriate line in fstab fails.
How do I set the cryptfs to prompt for password and unlock the drive at boot?
Thanks,
Adam
Seems that I needed to edit the /etc/crypttab
file, which is the crypto equivalent to fstab
, and add the following line:
# create a /dev/mapper device for the encrypted drive
home /dev/sda2 none luks
And add the following to /etc/fstab
:
# /home LUKS
/dev/mapper/home /home ext4 rw 0 0
Now I get two password prompts at boot, as needed.