qo.is/infrastructure
4
0
Fork 0
Code Issues 15 Pull requests 1 Projects 1 Activity Actions

lindberg, cyprianspitz: Secure Boot with TPM LUKS Disk Unlock #7

New issue
Open
opened 2024-10-02 17:03:46 +00:00 by fabianhauser · 0 comments
fabianhauser commented 2024-10-02 17:03:46 +00:00
Owner
Copy link

Unlock LUKS encrypted disks automatically with Verified Secure Boot.

See:

Edit: The security of this is questionable at this time: https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/

Unlock LUKS encrypted disks automatically with Verified Secure Boot. See: - https://discourse.nixos.org/t/full-disk-encryption-tpm2/29454/3 - https://discourse.nixos.org/t/a-modern-and-secure-desktop-setup/41154 Edit: The security of this is questionable at this time: https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/
fabianhauser changed title from Secure Boot with TPM LUKS Disk Unlock to lindberg, cyprianspitz: Secure Boot with TPM LUKS Disk Unlock 2025-03-05 13:39:28 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
feat/lindberg-networkd
microvm-services
microvm-experiment
test-cloud
18-caral
No results found.
Labels
Clear labels   
bug
Something is not working

  
duplicate
This issue or pull request already exists

  
enhancement
New feature

  
help wanted
Need some help

  
invalid
Something is wrong

  
question
More information is needed

  
urgent
This issue should be tackled soon

  
wontfix
This won't be fixed

No labels
bug
duplicate
enhancement
help wanted
invalid
question
urgent
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
2025: Deployment and Monitoring
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
qo.is/infrastructure#7
No description provided.