Smartcard-key-luks script with LUKS/LVM

I’d bought my Librem Key about 4 months ago, but, for various reasons, hadn’t had the chance to really sit down and dig into getting this script to work until this weekend. It doesn’t work on most modern Debian-based OS’s with full disk encryption out of the box, as the script assumes that the encrypted partition will be directly loaded instead of managed by LVM.

Fortunately, the workaround is fairly easy. You’ll want to double-check crypttab to find your encrypted partition:

cat /etc/crypttab

and look for the largest partition, most likely. On my system, the partition was called ‘cryptdata’.

Simply replace line 22 in the script with

ROOT_LUKS=‘cryptdata’

and then save and execute as directed in the instructions.

2 Likes