fnndsc.dracut_sshd

An Ansible Role to install dracut-sshd for remote unlock of LUKS-encrypted root partition via password on AlmaLinux 10.

Variables

This entire role is feature-gated by dracut_sshd_enabled, which by default is auto-detected by the presence of rd.luks.uuid in kernel parameters.

Other defaults and behavior assume that your server is connected to Ethernet and relies on IPv4 DHCP. Static IP configuration or IPv6 would need to be configured manually.

Example Playbook

---
- hosts: all
  roles:
    - fnndsc.dracut_sshd

Notes

• /etc/hostname seems to be included in the initrd by default. (It would also be possible to set the kernel parameter systemd.hostname=)