Kickstart will not prompt for a passphrase when the actual passphrase is omitted
as documented in kickstart-docs.txt. I'm using options "--encrypted
--passphrase=". Result is unencrypted devices. Happens with both "text" and
graphical installs. Actually giving a password using --passphrase=password
works, but is insecure to embed in the kickstart file.
I'm hopeful an anaconda patch to load during kickstart will appear so we don't
have to wait for F10.
Bump, vote or whatever.
I really need this or even better to be able to specify a location to write a
key to such as "--key-file=/dev/sdc1/disk.key" would be unbelievably handy. I
can then prompt the user either post-install or at first-boot to set a
pass-phrase as an alternative or then and a company wide recovery key somehow.
Fix will be in anaconda-126.96.36.199-1 (rawhide).