From: James Bunton <jamesbunton@delx.net.au>
Date: Fri, 30 Oct 2015 23:57:59 +0000 (+1100)
Subject: reboot-no-passphrase for systems with LUKS encrypted root filesystems
X-Git-Url: https://code.delx.au/monosys/commitdiff_plain/99541278d9caa72c891b2ae3f4d4e7389eb5a0e6?ds=sidebyside

reboot-no-passphrase for systems with LUKS encrypted root filesystems
---

diff --git a/systemd/system/disable-crypto_keyfile.service b/systemd/system/disable-crypto_keyfile.service
new file mode 100644
index 0000000..7959532
--- /dev/null
+++ b/systemd/system/disable-crypto_keyfile.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=Disable /root/crypto_keyfile.bin on every boot
+After=basic.target
+
+[Service]
+Type=oneshot
+ExecStart=cryptsetup luksRemoveKey /dev/disk/by-uuid/%i /crypto_keyfile.bin
+SuccessExitStatus=2
+
+[Install]
+WantedBy=basic.target