mikegerber/hetzner-dracut-sshd
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Post-install script for Hetzner's installimage that installs dracut-sshd to enable remote LUKS unlocking via SSH, on Rocky Linux 10.
3 commits 1 branch 0 tags 39 KiB
Find a file
Mike Gerber 89e50588fe 🧹 Remove unused have_cmd()
2026-09-15 20:19:57 +02:00
post-install.sh 🧹 Remove unused have_cmd() 2026-09-15 20:19:57 +02:00
README.md 🎨 README: Small markup fix 2026-09-15 20:07:39 +02:00

README.md

hetzner-dracut-sshd

🚧 Work in progress 🚧

Post-install script for Hetzner's installimage that installs dracut-sshd to enable remote LUKS unlocking via SSH. Tested with Rocky Linux 10. It should also work with AlmaLinux 10 and possibly earlier releases, but these have not been tested.

Notes

  • The script assumes a setup with LVM on RAID1, but this is not a strict requirement. Other setups may require small changes to the script.
  • Replaces NetworkManager with systemd-networkd and installs systemd-resolved
    • systemd-networkd is configured to use DHCP on all Ethernet interfaces
    • Although NetworkManager would probably also work with the implicitly installed dracut-network, we use systemd-networkd here because it’s our preferred option.
  • Enables EPEL (required for dracut-sshd and systemd-networkd)
  • Installs dracut-sshd
    • Uses the SSH keys in /root/.ssh/authorized_keys, as previously installed by installimage