Category: Vault

Firstly, this was a really fun experiment which has ended up with a working solution. There is still a lot of work to do on this before it should be considered anywhere near “Production Ready”. Off the top of my head, here is what i believe needs working on

This is a continuation from my previous five posts (Part Zero, Part One, Part Two, Part Three, Part Four ) about the need to have automated way of storing and pull LUKS keys for my servers.

In this post im hoping we can conclude this series with setting up a client to test this whole system. For this, i have setup a new VM and added an additonal disk to it (this is all done on a proxmox cluster).

This is a continuation from my previous four posts (Part Zero, Part One, Part Two, Part Three ) about the need to have automated way of storing and pull LUKS keys for my servers.

In this post im going through preparing Vault for storing our LUKS keys and getting the details we will need to add onto hosts for them to be able to use Vault.

This is a continuation from my previous three posts (Part Zero and Part One and Part Two) about the need to have automated way of storing and pull LUKS keys for my servers.

For this section we are going to look at getting vault configured ready for use. This means we are going to look at initialising Vault, getting the operator keys and unsealing etc.

This is a continuation from my previous two posts (Part Zero and Part One) about the need to have automated way of storing and pull LUKS keys for my servers.

In this post, we are going to setup the Vault servers.

This is a continuation from my previous post about the need to have automated way of storing and pull LUKS keys for my servers.

In this post, we are going actually start getting things moving by setting up the consul backend.

Originally this was going to be a single guide for going from nothing to a working solution, but i realised the post became HUGE, so im splitting it out into “Setting up consul”, “setting up vault” and finally “Configuring Vault”. At the end of the “series” you should be able to pull LUKS keys from vault on boot and automatically.