0

I would like to have my Linux systems use hard disks that are encrypted, and can be decrypted with some sort of key in Active Directory.

I would like the system to prompt for a username and password before booting to Linux. If these are authentic, then the hard drive is decrypted and Linux may boot.

I figure it might be possible to encrypt everything except /boot, and have Grub execute a script I could write, that would then authenticate against AD. Does Grub have this capability? Would it be better to include a small Linux kernel that does this role, before booting to the proper system, or something of that nature?

Improve this question
8
  • Do you want to decrypt the whole disk before booting, or do you want to pass a decryption key to Linux? First solution doesn't look realistic for plenty pf reasons.
    – xenoid
    Oct 17, 2019 at 7:19
  • Either/or, I just want the hard-disk encrypted so that it can't be scraped if somebody steals it or something.
    – tj94
    Oct 17, 2019 at 7:57
  • So what you want is get the LUKS key from AD, which isn't really happening before the boot but during the boot.
    – xenoid
    Oct 17, 2019 at 8:07
  • Why exactly is the first situation unrealistic?
    – tj94
    Oct 17, 2019 at 12:05
  • Also, I figured it would have to be preboot because I want to encrypt places like /etc, and I didn't think you could get very far without it
    – tj94
    Oct 17, 2019 at 12:06

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .