@kkarhan@infosec.space@bls @Wintermute_BBS @f4grx @RaspberryPi if it also supports setting up #LUKS-encrypted #FDE without storing the key insecurely in plaintext, I'm interested.
- Bonus points if it even supports #SSH'in into it at boot to remotely unlock it.
Cuz #FullDiskEncryption is a non-negotiable essential functionality [infosec.space] and manually setting up LUKS post-install [www.kali.org] is just a pain in the ass...
Kali LinuxRaspberry Pi - Full Disk Encryption | Kali Linux DocumentationHigh-level overview Before we dive into the lower-levels of technical details of what we are going to accomplish, let’s take a quick look at our goals that we want to achieve, and break it down:
Install Kali Linux on a Raspberry Pi 4 (henceforth called “RPi”) Prepare the system for encrypted boot ready for remote disk unlock Setup SSH keys to allow the remote unlock to occur (using initramfs and Dropbear) Backup any existing data Configure the encrypted partitions Restore our data Hack away!