what's a few systemd services in initramfs between friends?

Lobsters is a community-driven platform for sharing and discussing links to articles, tutorials, and projects related to technology and programming. Readers can learn about a wide range of topics, from software development and system administration to cybersecurity and artificial intelligence. With user submissions, comments, and voting, Lobsters provides a platform for collaborative learning and knowledge sharing among technology enthusiasts.

Lobsters

Setting up remote SSH access to unlock an encrypted hard disk during early boot requires installing Tailscale and Dropbear SSH server into initramfs. The solution involves configuring systemd services in the initial RAM filesystem, setting up Tailscale ACLs to restrict access, configuring networking before the main OS loads, and restricting SSH to only run the unlock command. This allows remotely entering the disk encryption password when a machine reboots unattended, while maintaining security through access controls and command restrictions.

remotely unlocking an encrypted hard disk