-
Currently, the install guide says the following:
> We will add a root partition to the remaining free space and format it as ext4. Alternative partition layouts and filesystems, including LUKS encr…
-
Any chance you can add getting the LUKS key from OTP on boot with initramfs? It's pretty easy with https://github.com/raspberrypi/rpi-eeprom/blob/e430a41e7323a1e28fb42b53cf79e5ba9b5ee975/tools/rpi-ot…
-
a fix landed in upstream repo ( 4 year later ...) but it should work for many people who don't use US layout it could be verry interesting to include it in the 41 releases bazzite and many more
I co…
-
I have an existing Nixos installation with LUKS full disk encryption and the disk partitions managed by Disko. The LUKS crypt was secured with fido2 (and a backup password) and `initrd` was set to use…
-
- [ ] Deprecate [meta-mender-kernel](https://github.com/coreycothrum/meta-mender-kernel) and remove dependency.
- [ ] Move A/B kernels from separate partitions to esp/efi (`MENDER/LUKS_KERNEL_DIR`)
…
-
Looking [here](https://github.com/nix-community/disko/blob/master/lib/types/luks.nix#L130-L135), I'm not sure if it's even possible to have disko do the setup without a patch? If a patch is required, …
-
Use [LUKS](https://nixos.wiki/wiki/Full_Disk_Encryption) (or some other framework) to support full-disk encryption.
This goes along with #1 and #2.
-
## Goal
| User story |
|:---------------------------------------------------------------------------|
| As an IT admin,
| I want to encrypt my Ubuntu Linux and Fedora Linux workstations and escr…
-
There's a comment @ https://github.com/debops/debops/blob/655364a257ce2a6ca40d4928486b3f0a467d46e6/ansible/roles/cryptsetup/tasks/manage_devices.yml#L181 saying that Ansible 2.9's module wasn't good e…
-
Should we implement LUKS header detaching from freshly locked tombs? Should it be a default?
An option for storing the header could be keeping it in the tomb key itself.