You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the description the luks key is bound to localhost in the documentation.
I have installed clevis-initramfs and getting the message that clevis has found network interface at early boot. But seems to be tang is not running at that time in early boot.
I do understood that the basic idea is that tang is running on another server and not the same where clevis is running but in my case the idea is just that the drives can not be read by anyone if stolen. That's still the case if tang and clevis coming up byself.
If that is not possible the documentation is missguiding because this localhost bindings do make no sense. In this case this should not be localhost but remotehost for the lunks binding.
The text was updated successfully, but these errors were encountered:
Hello,
Maybe I'm missunderstanding the documentation:
https://access.redhat.com/documentation/de-de/red_hat_enterprise_linux/8/html/security_hardening/configuring-automated-unlocking-of-encrypted-volumes-using-policy-based-decryption_security-hardening
In the description the luks key is bound to localhost in the documentation.
I have installed clevis-initramfs and getting the message that clevis has found network interface at early boot. But seems to be tang is not running at that time in early boot.
I do understood that the basic idea is that tang is running on another server and not the same where clevis is running but in my case the idea is just that the drives can not be read by anyone if stolen. That's still the case if tang and clevis coming up byself.
If that is not possible the documentation is missguiding because this localhost bindings do make no sense. In this case this should not be localhost but remotehost for the lunks binding.
The text was updated successfully, but these errors were encountered: