Hi,
I might setup a x86_64 tablet for a friend with encryption of the root partition through password (no tpm). Now the consideration is to use a Bluetooth keyboard (5.0+).
Generally, the system should not be customized/modified but only use means as they are setup and supported by default: the person ain’t technical, and should not rely on me. So what is used should be what is supported by default to ensure a smooth experience also throughout future updates. So patching kernel or customizing initramfs/dracut etc ain’t an option.
So the question is, if the root partition is encrypted with a password (default encryption, in this case equal to what is created by anaconda on installation), and the device thus needs to unlock root on boot, is it possible to use a Bluetooth 5.0+ keyboard to enter the password at this early stage?
I never used Bluetooth keyboards so I indeed never thought about this ^^ But my guess was that if that is possible, there are surely people using that means and know for sure off the cuff
I get my Bluetooth gear connected when I get to sddm before that those can’t be connected I guess it needs sddm/boot to actually connect Bluetooth devices.
It might be huge security concerns if on start it can connect to Bluetooth devices already
D*** it You just reminded me on the connecting process / handshake. On this device / use case, I actually see the implications around Bluetooth in general as acceptable as long as it is Bluetooth 5+, but of course the hand shake is managed in the user space, by default even with user privileges, and so is the data stored. Making this work on boot would indeed raise serious implications and thus cannot work by default
Thanks for helping me to find the error in reasoning though! I just was thinking on how to solve a problem and then I had this thought/mitigation as potential solution in mind… obviously not a good one