Context: I replaced my passphrase prompted at launch by a keyfile, stored on a USB dongle. My question concerns the step:
# cryptsetup luksAddKey /path/to/mykeyfile.
I generated my added key is made this way:
dd if=/dev/urandom of=mykeyfile bs=512 count=4.
**I aim to make it run in a bash (it works...), but without passphrase prompt, and finally with zero prompt. ** My question:
- Can I do something like
cryptsetup luksAddKey -passphrase "Hello, my name is Jolly Roger" /path/to/mykeyfile?
- Or at least, can I pass the passphrase to an argument to my script call ?
# sh myscript.sh -passphrase "Jolly..."
It does exist for SSH,
Security Note : I dont care at all writing the passphrase in a script, cause it is replaced in
/etc/crypttab by the keyfile. In addition, the script is to be used by confidential inhouse members. It is private.