I'v set up a debian install like this :
- /dev/sdb5 is /boot
- /dev/sdb6 is LUKS encrypted /
- /dev/sdb7 is LUKS encrypted swap
This works well however I need to enter 2 passphrases at each boot.
Is there a way to modify this setup so as to use only one passphrase without wiping the disk?
I used to have a system where (if I remember well) there was an encrypted key file on the boot partition. I enter one phrase to decrypt it and it would be used to decrypt all the partitions.