This is an automated archive.

The original was posted on /r/fedora by /u/Forestsounds89 on 2023-08-07 04:50:06+00:00.

I found a guide for silverblue but im running workstation

ive followed all the steps up till the siverblue part, im just not sure how to apply or save these commands properly

Format a USB drive with vfat

Generate a key file on that USB drive

Open a terminal.

Run lsblk -f to get the UUID of the encrypted partition (look for “crypto”), as well as the UUID of the USB drive’s partition.

Still in the terminal, run: rpm-ostree kargs --editor
Using the editor, add the following kernel arguments:

rd.luks.key=XXXXX=/path/to/key/file:UUID=ZZZZZ

rd.luks.options=XXXXX=keyfile-timeout=5s

(replace XXXXX with the encrypted partition’s UUID and replace ZZZZZ with the USB drive’s partition.)

I have my correct UUID info ready and the correct path to my usb keyfile

I already ran the command sudo cryptsetup luksAddKey

and added my usb keyfile to slot 1

the goal is to automatically unlock the full disk encryption if the usb drive is present, if its not fall back to password, thank you for any help