←back to thread

Apple: SSH and FileVault

(keith.github.io)
507 points ingve | 2 comments | 18 Sep 25 20:15 UTC | HN request time: 0s | source
Show context
reader9274 ◴[18 Sep 25 20:47 UTC] No.45294811[source]▶
So you're saying i can now have a fully remote mac mini server with auto-reboot on power outage without the need to physically log in with a keyboard attached? Awesome
replies(11): >>45295194 #>>45295532 #>>45295803 #>>45295918 #>>45296499 #>>45298327 #>>45298862 #>>45298996 #>>45299462 #>>45300622 #>>45300893 #
varenc ◴[18 Sep 25 21:25 UTC] No.45295194[source]▶
You can also do this:

   sudo fdesetup authrestart -delayminutes -1
which will make the computer auto login to the chosen account on next reboot, without having to type in a password. Only lasts once. Has obvious security downsides though but that might be fine.
replies(2): >>45295374 #>>45296504 #
1. firecall ◴[19 Sep 25 00:06 UTC] No.45296504[source]▶
I was also aware of this - but I dont want my Mac to actually auto login, for obvious reasons!

I just want me to able to remotely login!

replies(1): >>45306037 #
2. varenc ◴[19 Sep 25 20:16 UTC] No.45306037[source]▶
You could have another script that immediately triggers the Lock Screen after boot...but agreed this comes with many compromises.

But if your Mac is physically secure, and has no keyboard or monitor on it anyway, I don't quite understand the risk? Remote login still requires the password after this of course. But if physical security is a concern it makes sense.

Also I suppose there's other risks from having a decryption key sitting in NVRAM.