action #152831
Updated by lnussel 5 months ago
cryptsetup luksFormat/reencrypt luksFormat requires entering a passphrase. It could just as well offer to generate a random recovery key like systemd-cryptenroll. The key could be put in the kernel keyring afterwards so can be retrieved.