Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to use dm-crypt on one of my Ubuntu servers, but I don't want to go there and type in the password every time I want to reboot.

What are my best options?

  • Virtualize the whole system so I can SSH into the host and start the dm-crypt device somehow?
  • Only encrypt data-partitions like /home?
share|improve this question
up vote 1 down vote accepted

I set up a system like that for a server a while ago. The key is to provide a minimal shell that allows you to unlock your system drive via SSH.

Back when I set it up, I followed a very complex guide which I wasn't able to dig up again. Instead, I found this (much shorter) version: Remote unlocking LUKS encrypted LVM using Dropbear SSH in Ubuntu

The principal should be the same.

share|improve this answer
Is there something i have to keep in mind when doing kernel-upgrades or such? How does it work with RAID/LVM? – Fabian Zeindl Apr 3 '12 at 11:39
I only use that mechanism to unlock my system drive. The actual storage (which uses md for RAID) is unlocked separately. So I can't really say how this would all work with a single unlock at boot time. – Oliver Salzburg Apr 3 '12 at 12:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.