Unfortunately, whenever I try and SSH to the server (over the LAN) at reboot, I get a "Connection refused" error. I have tried
nmap to the default port (22) and both say the port is closed.
The server has a
ufw rule to accept all traffic from the LAN:
Anywhere ALLOW 192.168.1.0/24
I have tried changing the port that dropbear listens on in
telnet are still refused connections1.
How can I ensure that a port is open at that stage in the boot process so that I can connect to unlock the LUKS container?
Disabling the firewall makes no difference:
nmap shows all ports still closed.
break=premount to the kernel line and had a poke around in the initramfs.
dropbear has started, but the network is not up at that point. After exiting, the network comes up and boot continues until the prompt to unlock the LUKS device.
At this point, the network is up, and the host has been assigned the correct IP address, but port 22 is still closed.
The IP line in
/etc/initramfs-tools/intiramfs.conf I am using is:
Consistent with the directions in
/usr/share/doc/cryptsetup/README.remote.gz I have tried just adding the device option, but that is not sufficient to bring the network up and obtain a dhcp lease.
Karl's answer was what was required: setting up
/etc/initramfs-tools/conf.d/cryptroot was the key:
This guide also proved more up-to-date and relevant (and successful).