Ubuntu 26.04 already provides the required initramfs networking infrastructure. This can be verified with clevis-dracut: a Clevis/Tang binding successfully unlocks the LUKS root volume after the initramfs network has been brought up.
The remaining missing functionality for manual remote unlocking is SSH access to the dracut initramfs. Fedora already provides dracut-sshd, and the upstream project supports Ubuntu 26.04. The module does not implement its own LUKS handling; instead it exposes systemd-tty-ask-password-agent through an SSH session, allowing the existing systemd/dracut LUKS password prompt to be used remotely. I therefore suggest packaging the existing upstream dracut-sshd module for Ubuntu rather than implementing a new SSH/LUKS mechanism inside dracut. This also has the advantage that it does not interfere with the existing clevis-dracut networking and automatic-unlock path. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2163307 Title: Provide SSH access in the Dracut initramfs for remote LUKS unlocking To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dracut/+bug/2163307/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
