It seems I am trying to do the same as the user who asked this question: Unlock LUKS partition using keyfile without root access?
The answer from frostschutz explains that this is impossible. I am hoping to understand the alternatives in more detail.
udisksctlworks without root access, using
udiskctl loop-setupfollowed by
udiskctl unlock(I tested it). How does it work around not having root access? [Not admitting keyfiles is a major drawback anyway, but it would still be helpful to know.]
cryptmounthttp://cryptmount.sourceforge.net/ looks like it might work but it's also unclear to me how cryptmount works around not having root access. Moreover, I prefer to minimize extra packages where possible, particularly cryptographic ones.
- GPG-encrypted tar, as explained by frostschutz, would be a sensible alternative, but I'd hope to make LUKS work.
- Are there any other options I haven't considered? Fiddling with udev/sudoers?