Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tang in early boot #132

Open
nemihome opened this issue Sep 1, 2023 · 0 comments
Open

Tang in early boot #132

nemihome opened this issue Sep 1, 2023 · 0 comments

Comments

@nemihome
Copy link

nemihome commented Sep 1, 2023

Hello,

Maybe I'm missunderstanding the documentation:
https://access.redhat.com/documentation/de-de/red_hat_enterprise_linux/8/html/security_hardening/configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption_security-hardening

In the description the luks key is bound to localhost in the documentation.

I have installed clevis-initramfs and getting the message that clevis has found network interface at early boot. But seems to be tang is not running at that time in early boot.

I do understood that the basic idea is that tang is running on another server and not the same where clevis is running but in my case the idea is just that the drives can not be read by anyone if stolen. That's still the case if tang and clevis coming up byself.

If that is not possible the documentation is missguiding because this localhost bindings do make no sense. In this case this should not be localhost but remotehost for the lunks binding.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant