Linux Server Disk Encryption with LUKS and Clevis

In this episode, Lucas and Luna dive into full-disk encryption for Linux servers using LUKS (Linux Unified Key Setup) and Clevis for automatic unlocking. Lucas explains how LUKS works at the block layer, the importance of LUKS header backups, and how Clevis integrates with network-bound disk encryption (NBDE) using Tang servers. They walk through a practical example: setting up LUKS on a new disk, storing the passphrase with Clevis, and configuring a Tang server for unattended reboot. Luna probes the trade-offs—security vs. convenience—and they discuss real-world use cases like data-center compliance and cloud server encryption. No prior episodes have covered automated unlocking, making this a fresh angle for sysadmins looking to balance security with operational needs.

#Linux #ServerAdministration #DiskEncryption #LUKS #Clevis #Tang #NBDE #Systemd #Cryptsetup #Security #Encryption #DataCenter #LinuxSecurity #Sysadmin #Technology #FexingoBusiness #BusinessPodcast #ServerEngineering

Keep every episode free: buymeacoffee.com/fexingo