reboot-no-passphrase always use last key slot

diff --git a/etc/systemd/system/disable-crypto_keyfile@.service b/etc/systemd/system/disable-crypto_keyfile@.service
index 26ce0068bdeac4ecbc8fa99b8cd4d3b6f92418d4..19dd58f67ee0b737f3cd67283c4cfde3d84974e7 100644 (file)
--- a/etc/systemd/system/disable-crypto_keyfile@.service
+++ b/etc/systemd/system/disable-crypto_keyfile@.service
@@ -4,7 +4,7 @@ After=basic.target
 
 [Service]
 Type=oneshot
-ExecStart=/bin/cryptsetup luksRemoveKey /dev/disk/by-uuid/%i /crypto_keyfile.bin
+ExecStart=/bin/cryptsetup luksRemoveKey /dev/disk/by-uuid/%i /crypto_keyfile.bin --key-slot 7
 SuccessExitStatus=2
 
 [Install]

diff --git a/scripts/reboot-no-passphrase b/scripts/reboot-no-passphrase
index bc81a9960fd6944165fc3275929b35c9c29b7bd0..fe4af4444a52ae9047effef6aa8359c64ec0904d 100755 (executable)
--- a/scripts/reboot-no-passphrase
+++ b/scripts/reboot-no-passphrase
@@ -24,5 +24,5 @@ if [ -z "$device_filename" ]; then
 fi
 
 set -ex
-sudo cryptsetup luksAddKey "$device_filename" "$crypto_keyfile"
+sudo cryptsetup luksAddKey "$device_filename" "$crypto_keyfile" --key-slot 7
 sudo reboot