Hello,
today I have installed ZorinOS in a QEMU VM to try it out. I installed the zfsutils-linux package and was therefore able to install Zorin on ZFS with full-disk encryption.
During installation I was asked to store a recovery.key for safety purposes onto a disk which I did. So now I have a file recovery.key which contains 48 decimal digits.
My question now is, what is this information good for? How do I use that file or its contents in case I forgot my passphrase?
The key for the ZFS encrypted root is stored in a keystore partition which is a LUKS2 container that I do unlock with my passphrase during boot-up. Then the boot process will unlock the ZFS dataset with the key found in the keystore.
But how comes the recovery.key into play?
Can anybody shed some light to this?
Thanks in advance ...