Hi: I read two very interesting howtos: A. http://www.howtoforge.com/automatically-unlock-luks-encrypted-drives-with-a-keyfile B. http://www.howtoforge.com/remotely-unlock-fully-encrypted-debian-squeeze Both are interesting. I could not figure out how to: 1. make the bootloader to load keyfile from USB (like in A above) which also has a passphrase to authenticate remotely using ssh (like in B) or say a combination of A and B? OR 2. make the bootloader to first search for keyfile, if there is a keyfile, the unencrypted volume would be decrypted (like A above) . If no keyfile found, it can alternatively wait to be remotely get passphrase (as in B above) or say either-keyfile-else- passphrase approach? Thanks! z
