This question is regarding the one raised at: Mount LUKS encrypted hard drive at boot
I have added my key to home folder and all works as a charm. Thanks guys!
However I would like to better understand the following statement:
UPDATE: If I locate the keyfile in
/boot(not encrypted), instead of in my
/dev/sda1and update the entry in
/etc/crypttabis perfectly mounted on boot time.
/home/[USERNAME] partition is encrypted, how bootloader will know where to find the key to decrypt the
/home/[USERNAME] partition before searching for the
A possible solution is presented in: How to configure LVM & LUKS to autodecrypt partition?, which consists of storing the luks keys in a USB device. However for whatever reasons we will not go with this approach.
I have seen that one possibility would be to add the keys to keyring, however I could not find a solution which combines decryption of luks partitions at boot time using luks keys stored in keyring.