I've released a new version of cryptreboot, an MIT-licensed, drop-in reboot replacement for disk-encrypted Linux systems.
The tool prompts for the passphrase before reboot, while the system is still fully operational and remotely accessible. This contrasts with a standard reboot, where the passphrase must be entered during early system initialization, often without network access.
This version adds support for native ZFS encryption with a LUKS keystore (as implemented in Ubuntu) and continues to support classic, plain-LUKS encryption.
No configuration is required—simply install the tool and use "cryptreboot" instead of "reboot." It also integrates smoothly with Dropbear-enabled initramfs configurations, allowing cryptreboot to function as usual. For standard reboots or system power-ons, the disk can be unlocked remotely via SSH.
To install on Ubuntu:
sudo apt install ruby kexec-tools
sudo gem install crypt_reboot
For more information, visit the project homepage and GitHub repository:
https://phantomno.de/cryptreboot
https://github.com/phantom-node/cryptreboot
I've seen many LUKS-related topics on this subreddit. I hope cryptreboot will be useful to data hoarders using disk encryption. If you have any questions or feedback, I'd be happy to address them here.
EDIT: I made a mistake in the post title. Of course, 0.3.1, not ~~3.0.1~~ is the the newly released version.