Re:Reading the Silk Road configuration
by ryan-c on Friday October 03, 2014 @02:01PM
(#8406712)
Mandos is pretty cool. Debian and Ubuntu can also embed dropbear into the initramfs so you can ssh in and unlock the disk.
[ Parent
| on HN ]
Dropbear (SSH access) still requires you to manually log in and unlock the disks; a primary feature of Mandos is that it can boot completely unattended (unless configured otherwise).
Yup, I've used Mandos, just stating that there are other options if you don't want automatic.
Mandos can be configured to be not automatic by setting the “approved_by_default” option for a client to “False” in the clients.conf file; See mandos-clients.conf(5): (http://www.recompile.se/mandos/man/mandos-clients.conf.5).
You also need to adjust the “approval_delay” setting.