Unlocking multiple devices
Zen Fu
zen at torproject.org
Tue Feb 10 00:07:35 CET 2026
Hello, dear Mandos devs! I have a question about a corner case use of
Mandos.
Our setup is such that we need to unlock 3 devices which, once
decrypted, form part of the same LVM VG. All of them need to be unlocked
before / can be mounted. They all have the same password.
Our issue is that mandos-client runs only once, so only the first volume
is unlocked and the kernel still needs 2 more password inputs before
it's able to proceed.
I wonder what's the best way to achieve that in a Debie Trixie box.
I *think* that scripts/init-premount/mandos is not parsing
/conf/conf.d/cryptroot because that file doesn't exist in the initrd, so
it only triggers /lib/mandos/mandos-to-cryptroot-unlock once.
Is there a simple way to make mandos-client run 3 times? I think that
would be enough to solve our issue.
Thanks a lot for the great tool!
PS: i'm not in this list, so please make sure that my email address is
included in replies.
--
Zen Fu
More information about the Mandos-Dev
mailing list