MMmmh0000·Mar 5, 2026
This has been a "need" for a long time for home users with FDE. The go-to software solution for Linux has been:
https://github.com/gsauthof/dracut-sshd
In Remotely unlocking an encrypted hard diskgsauthof
dracut-sshd
Shell2020–2026
gsauthof / dracut-sshd
dracut-sshd
Provide SSH access to initramfs early user space on Fedora and other systems that use Dracut
5Distinct people
5Mentions
0Explicit recommenders
333GitHub stars
What to know before exploring
What it is
Provide SSH access to initramfs early user space on Fedora and other systems that use Dracut
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year5 dated mentions
Observed mentions: 2020-01-28 21:57:20 UTC to 2026-03-05 20:20:40 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
5 sources> There has to be a better way.
Probably Clevis and Tang, network disk decryption that can only decrypt if most of your servers are online. https://github.com/latchset/clevis https://github.com/latchset/tang
Or network decryption (SSH into initrd). https://github.com/gsauthof/dracut-sshd
In Bypassing disk encryption on systems with automatic TPM2 unlockOr remote unlock:
https://github.com/gsauthof/dracut-sshd
In I picked up a shitty NUC from ewaste and it had a label on it for an AI companyThis is more or less the RedHat based solution to do this using openssh:
https://github.com/gsauthof/dracut-sshd
https://copr.fedorainfracloud.org/coprs/gsauthof/dracut-sshd...
In TinySSH is a small SSH server using NaCl, TweetNaClI haven't posted it anywhere because it's a bit of a mess, but here you go: https://pastebin.com/ZfkM2zkU
I'm not proud, or smart, but it works. Systemd is used for networking to make it simpler.
I based it on this: https://github.com/gsauthof/dracut-sshd
I should probably package it up with all the config options you'd need to specify drive and keyfile location and all that, but I'm a terrible member of the community and haven't actually done it yet.
The real trick that took me a long time to figure out was invoking "cryptsetup luksOpen" with my mount.sh script and then using "systemctl stop systemd-cryptsetup@nvme0n1p3_crypt.service" to get the thing to keep booting. I still don't really understand the tty ask password stuff in systemd, but this seems to work fine.
You just ssh in and run ./mount.sh and it decrypts/mounts/boots.
In Better-initramfs: initramfs supporting SSH, lvm, luks, raid, uswsusp and more