From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id KNdvJywlA2Oh/AAAbAwnHQ (envelope-from ) for ; Mon, 22 Aug 2022 08:41:48 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id mPVZJywlA2PvRwAAauVa8A (envelope-from ) for ; Mon, 22 Aug 2022 08:41:48 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 39EEC8CFE for ; Mon, 22 Aug 2022 08:41:48 +0200 (CEST) Received: from localhost ([::1]:51520 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oQ0mx-0007kR-Dd for larch@yhetil.org; Mon, 22 Aug 2022 02:19:55 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45210) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oQ0mT-0007R7-Fa for help-guix@gnu.org; Mon, 22 Aug 2022 02:19:25 -0400 Received: from mugam.systemreboot.net ([139.59.75.54]:44248) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oQ0mQ-0007ol-EB for help-guix@gnu.org; Mon, 22 Aug 2022 02:19:25 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=systemreboot.net; s=default; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:To:From:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=DgubtErxoqFaRHvXKEB4uwgsVo3bv5mo0GK757Zlfq8=; b=Ovpul33TE67KVRk4Uy8V0dciUK iBpU7BBxOmNz5RmUW/O3+9/FULxsyTzKwNd0sVP1y4xEwx6jvilkHC7V0bcpxWlt660mzR6Fi+6az 5TYMfPV008U9QAwzRRYKJkmMBrIpsvkRo3HXEHbjK6KqxyeVeHhiURZt60sS671z/snRV6ZRaZrKr wDapBJS2GloxDbrkt/AMZbHe+KP1hEZr+bTAt/67O2pZmtrSPU369F1MmJ7SEPZb1vjHcjg+TZHhX xdsyQpmkdDaP69xirveRWbvbiu3bkoY12BWd9260QsqidXy2dmpCt7rmna6mkeAcbloRJUQhmyXef N9bilSZg==; Received: from [192.168.2.1] (port=53518 helo=steel) by systemreboot.net with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1oQ0mI-0005Sw-0I; Mon, 22 Aug 2022 11:49:14 +0530 From: Arun Isaac To: guix.rc7ys@simplelogin.com, help-guix@gnu.org Subject: Re: Avoiding Typing Encryption Passphrase Multiple Times In-Reply-To: <166057943684.8.1636695400544226142.57309203@simplelogin.com> References: <166057943684.8.1636695400544226142.57309203@simplelogin.com> Date: Mon, 22 Aug 2022 11:49:13 +0530 Message-ID: <871qt87qce.fsf@systemreboot.net> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=139.59.75.54; envelope-from=arunisaac@systemreboot.net; helo=mugam.systemreboot.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1661150508; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=DgubtErxoqFaRHvXKEB4uwgsVo3bv5mo0GK757Zlfq8=; b=dgmtRDODJnqVQ67a9N32hct6ioupIIPeZ97UXynVgx3qIX8FUYDNCWPXrspRBN0Ma9bDvn HVsH/+gYgWetmQm6ujo2tBuXklxarFh+jbQIA4oTQzp3C05u0goTa8XMUsEs4I3RdgAiWi cK9ja1MfNpeIDPrAffYueV/HhaZhWyOlXctN9ZlsvyA55snhHAV7m9Qy2geTSzlRuF33UG 9JG9IbHsxCsUf+n8ZvvPL9wltmaQqaZ0aOYsMSpI3RCeOqTR2mxrSc4dM5wajJreK8mKng lDyvWMH+IQX3uqZmTTTgNuDOJe++xkfQMlHFWeHPQPfIhCXD4qcpTeYI/duZTA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1661150508; a=rsa-sha256; cv=none; b=H6HY7eTcSJY1mDOoQ3f2J6bmt9ozukT1YWZ3Cm11FL2k9iOq5WUqczBbQaYc/xrQfzf5Vf AiWYgEIGMGlSV/LQXFtnyDyRJc7QIu633W4HtzLqsB0/uv5V4UjinSXLa4pjmqc21lZEuy TQlgfwJWLTVw0eLS/jxIV57yD+wDudfr6Kpz9R9cEq4hNm6reKa181Dxn5ieQwS7QPPduH pVMrL1iB/IXDAgAdbdIEagPNrOj0Fb7Ci93ALJ11Aqpd4o7dcikwC+uPIoTC4RN0F7UobW t2/IJzH7RHgvJLOY7OwV0nk9MmhCO0vAxkRKGb9/WJ+GKyBd3HlWHjbRmh7++Q== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=systemreboot.net header.s=default header.b=Ovpul33T; dmarc=fail reason="SPF not aligned (relaxed)" header.from=systemreboot.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 7.88 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=systemreboot.net header.s=default header.b=Ovpul33T; dmarc=fail reason="SPF not aligned (relaxed)" header.from=systemreboot.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 39EEC8CFE X-Spam-Score: 7.88 X-Migadu-Scanner: scn0.migadu.com X-TUID: Z/0NVKQUyp1M Hi John, I believe the canonical way to do this is to set up LVM on LUKS. See pros and cons of different approaches in the table at https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#Overview With LVM on LUKS, you only need to enter the passphrase once to unlock the LVM. All partitions inside the LVM are automatically unlocked as a result. Hope that helps! Regards, Arun