search

openzfs / openzfs-docs

OpenZFS Documentation
https://openzfs.github.io/openzfs-docs/
135 stars 194 forks source link

Add native encryption option to root NixOS guide #481

Open mariaa144 opened 11 months ago

mariaa144 commented 11 months ago

Can native encryption be added back to the NixOS guide? I know there are bugs associated with the native encryption option but I have never encountered any of them. I would rather all my systems be setup with native encryption rather than have some with native and some with LUKS.

I noticed all of the other guides have the native encryption option but NixOS has had it removed. Has NixOS had native encryption removed because it is too difficult to support in the flake?

ghost commented 11 months ago

于 2023年12月15日 GMT+01:00 下午10:11:57, Maria @.***> 写到:

Can native encryption be added back to the NixOS guide? ... I would rather all my systems be setup with ...

No. If you want to live with risks, then that's your very own, personal choice.

But do not expect me to add it back without all the bugs being solved first.

I noticed all of the other guides have the native encryption option but NixOS has had it removed.

That's because I have not bothered to find out how to do LUKS for those guides. (Quote: ...yet to be written.) I will promptly remove native encryption from those guides once I have done so.

Has NixOS had native encryption removed because it is too difficult to support in the flake?

No. In fact, this current repo fully supports native encryption sans SSH unlock. But, if you do not want to help with debugging systemd-based initrd, then I suggest you to just stick with an older revision of this repo.

mariaa144 commented 11 months ago

I understand. It is too bad native encryption is is such bad shape. I already have several systems which are stuck on native encryption for now so I kind of wanted to keep new systems on native encryption as well just for consistency. I don't know what I'm going to do.