how to start microvm with LUKS encrypted file system(rootfs.ext4) using firecracker

[jahnavilatha589]

I have created an encrypted filesystem(rootfs.ext4) using LUKS. Trying to start microvm by using LUKS encrypted file system with firecracker.

Is it possible to start microvm with encrypted file system..? Can anyone suggest on this.

[bchalios]

Hi @jahnavilatha589,

Thanks for the interest in Firecracker :)

We haven't tried booting a microVM with an encrypted rootfs, so I am not sure if it would work.

Firecracker microVMs do not use a boot-loader to boot. I am not sure whether dm-crypt prompts you for a password to unlock the partition at boot-time. Maybe if you used an initrd: https://github.com/firecracker-microvm/firecracker/blob/main/docs/initrd.md to boot from, which you have setup for LUKS and then pivot to your encrypted file-system, with switch_root it could work.

You should definitely be able to use an un-encrypted root filesystem with additional encrypted drives which you unecrypt at boottime.

[qasmi]

Hello,
I am trying to run a microVM with a LUKS encrypted file system (using dm-crypt) and am encountering the same issue as you @jahnavilatha589. Did you manage to find a solution?

@bchalios do you have any recommendations on how to start microvms with encrypted file system ?

Thanks