From zen at torproject.org  Tue Feb 10 00:07:35 2026
From: zen at torproject.org (Zen Fu)
Date: Mon, 09 Feb 2026 20:07:35 -0300
Subject: Unlocking multiple devices
Message-ID: <87h5rpzfbc.fsf@localhost>

Hello, dear Mandos devs! I have a question about a corner case use of
Mandos.

Our setup is such that we need to unlock 3 devices which, once
decrypted, form part of the same LVM VG. All of them need to be unlocked
before / can be mounted. They all have the same password.

Our issue is that mandos-client runs only once, so only the first volume
is unlocked and the kernel still needs 2 more password inputs before
it's able to proceed.

I wonder what's the best way to achieve that in a Debie Trixie box.

I *think* that scripts/init-premount/mandos is not parsing
/conf/conf.d/cryptroot because that file doesn't exist in the initrd, so
it only triggers /lib/mandos/mandos-to-cryptroot-unlock once.

Is there a simple way to make mandos-client run 3 times? I think that
would be enough to solve our issue.

Thanks a lot for the great tool!

PS: i'm not in this list, so please make sure that my email address is
included in replies.

-- 
Zen Fu