Auto-Attaching and Auto-Mounting LUKS Volume During Boot

Open /etc/crypttab and add below content.

›_ crypttab file
`mydisk UUID=0a9571f8-11f5-4e35-acc6-c4c35c5390d1 - pkcs11-uri=auto`

Use the command below to start the network service before running system-cryptsetup service.

›_ Console
`# grubby --update-kernel=ALL --args="rd.neednet=1"`

Reboot the system.
There is a password prompt during the boot for attaching LUKS volume. Provide the slot PIN when prompted.

Boot window

Once the system is up, verify that status of systemd-cryptsetup service.

›_ Console
`# systemctl status systemd-cryptsetup@mydisk.service`

systemd-cryptsetup service status

Format the volume with File System.

›_ Console
`# mkfs.xfs /dev/mapper/mydisk`

Create one directory for mounting the volume.

›_ Console
`# mkdir /mnt/hdd`

Get UUID of /dev/mapper/mydisk.

›_ Console
`# blkid`

Add below entry in /etc/fstab.

›_ fstab file
`UUID=7f514a18-c3e7-4e35-b975-d68ceb624bcf /mnt/hdd xfs defaults 0 0`

Here UUID is for /dev/mapper/mydisk.

Run below command to mount the encrypted volume.

›_ Console
`# mount -a`

Mounting LUKS volume

If the above command does not work, troubleshoot accordingly.

Next, reboot the system and check if the reboot halts waiting for LUKS passphrase to mount the encrypted device.

Boot window

Provide slot PIN when prompted.

When the system is up and running, verify that the encrypted volume is mounted automatically.

›_ Console
`# df -Th`

Listing mounted volumes