Add instruction to remove passphrase for LVM device

stigok · May 9, 2018 · aa6a389 · aa6a389
1 parent ebe9768
commit aa6a389
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/_posts/2018-05-03-lvm-in-luks-with-encrypted-boot-partition-and-suspend-to-disk.md b/_posts/2018-05-03-lvm-in-luks-with-encrypted-boot-partition-and-suspend-to-disk.md
@@ -376,6 +376,12 @@ Do the same for the *encrypted-lvm* partition
 
     # cryptsetup luksAddKey /dev/nvme0n1p3 /etc/initcpio/keys/encrypted-lvm.key
 
+Now that the LVM container has a keyfile attached, the passphrase used
+initially when creating the LUKS container can **optionally** be removed
+from the device.
+
+    # cryptsetup luksKillSlot /dev/nvme0n1p3 0 --keyfile /etc/initcpio/keys/encrypted-lvm.key
+
 Create the initial ramdisk environment and make sure it doesn't return any errors.
 Some warning may show, but errors should not occur.