hey team! Does anyone know how to escrow a LUKS key for Ubuntu in Fleet if I've only got access to the shell? There is no desktop environment installed, but the Fleet portal is telling me to go to the My Devices page to continue steps, but I won't be able to get there without installing the full desktop environment which would be problematic for this server

Hey Billy, I'm not entirely sure this is possible right now. But I'm looking into it for you!

It looks like we may only support this for desktop Linux and not headless.

yeah I would expect some sort of CLI command like that!

I built out a workflow for this for adding a backup escrow key on our laptops. I've created some a sample script here: https://gist.github.com/jc0b/73d0877289a28e620db48b47d6239982 You'll want to modify this, but what this does is basically: • Uses a known LUKS key to: ◦ Create a new LUKS slot ◦ Randomise a passphrase for that slot • Escrows that random key to FleetDM using on-device credentials from Orbit If you wanted, you could probably modify this to rotate + escrow just one LUKS key, rather than create another one in another slot. I've had this working under Ubuntu 24.04 for a while now 🙂

Thanks Jacob! I'll see if this can work for me in the meantime while we wait for the Fleet team to take a crack at solving this