Network-Based LUKS Volume Decryption with Tang

This course teaches how to securely unlock LUKS volumes at boot using a network-based service, maintaining encrypted data at rest. The learning outcomes include understanding LUKS volume encryption, Clevis automated encryption framework, Tang server installation, and key recovery. The course aims to equip learners with the skills to set up and trust Clevis, initialize LUKS metadata, add LUKS keys, and complete the decryption process. The teaching method involves a demonstration of the solution to the problem, with a focus on practical implementation. The intended audience for this course includes system administrators, IT professionals, and individuals interested in enhancing data security on Linux systems.