Hi,

On Fri, Sep 04, 2026 at 08:19:51PM +0000, [email protected] wrote:
> I am not sure if this is the correct format for this question, but if
> this is the incorrect forum, and can point me to a forum or other that
> maybe can offer better advice I would surely appreciate it.

I'm not a user of zerotier but I imagine a forum dedicated to zerotier
users might be able to help more. Any solution for Debian or Ubuntu (or
another Debian derivative) will probably work.

> I see there is a solution for SSH before the password
> prompt for the NVMe encryption, but that wouldn't run the Zerotier
> software.. so then SSH would not work because can't see the machine
> outside the local network.

If I understand you correctly by "NVMe encryption" you mean the usual
LUKS encrypted block device support on Linux, rather than the hardware
encryption of the drive itself.

The usual solution for unlocking LUKS remotely is to use the minimal
SSH server called dropbear. That's probably what you have seen. On
Debian this use case is well catered for, so you can just install the
dropbear package and enable its initramfs mode, and once your initramfs
is updated it should be possible to log in by SSH.

AS you've realised, in your case you also want zerotier to be running at
this time. So the thing you're looking for is how to start zerotier from
the initgramfs.

I've never done it but a search came up a few hits such as this one:

https://github.com/vnightsong/initramfs-zerotier

I realise this hasn't been updated in 4 years, but it looks pretty
simple.

If you read the README and the install.sh it just installs a few
initramfs hook files. It doesn't look like a very difficult thing to
achieve.

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Reply via email to