Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I have set up our new server at work to have an encrypted HDD. At start up it asks for our password before booting. Great. Except it has just dawned on me that we ssh in to the server all the time. What if I need to restart the machine remotely or the power goes out over the weekend.

Is there a way around this? I would still like to have the entire disk encrypted.

Thanks

share|improve this question
    
see also this related question: unix.stackexchange.com/questions/5017/… for a solution with BusyBox and Dropbear. –  Takkat Mar 28 '13 at 19:59

1 Answer 1

up vote 2 down vote accepted

There is no safe way around this.

Either you:

  1. Enter the password automatically. Thus negating the security.
  2. Or you manually enter it at boot.
  3. Or you manually enter it after booting a small unencrypted partition.

The last allows you to boot a minimal system into which you can SSH and then manually mount the partitions with protected data, but it also weakens the security because people can compromise this unencrypted part and wait for you to enter the encryption password.

If your server is equipped with a remote management feature (E.g. Dells DRAC, HP ILO etc) and that is on a secure network then you can also consider using that to remotely grab the console and enter the password (A sort of remote option 2). That assumes you trust the remote management features and network.

share|improve this answer
    
yes I thought that this would be the case. I just needed it confirmed. Thank for your suggestions. –  Caustic Mar 28 '13 at 12:05

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.