This repository has been archived on 2024-01-30. You can view files and clone it, but cannot push or open issues or pull requests.
docs/content/rebooting.md
stuebinm b35887d58a migrate old stuff from bookstack
(at least the few bits that still retain any relevancy at all)
2022-01-05 22:52:09 +01:00

25 lines
737 B
Markdown

+++
title = "Rebooting encrypted Hosts"
taxonomies.categories = [ "nix" ]
+++
## Check integrity after unexpected shutdown
These steps are only required if the server shut down unexpectedly or you suspect tampering.
TODO
## Unlock full disk encryption
Connection to the server via the command listed in the shared password manager.
Only the Vorstand has access to it!
Enter the passwords for dpool and zroot.
If both are correct, you will be disconnected and the server continues the boot sequence.
The server should be up after about minute. Please check all services for availability.
## Copy the host key to the right place
You can't set new boot entries without it
```sh
sudo cp /etc/ssh/encboot_host /run/keys/ecdsa_host
```