3 ms·
Better, have a secure server at home and ansible playbooks to set up laptops (including getting any minor secrets that you need onto that laptop. Restrict more
by busterarm 8y ago
Better, have a secure server at home and ansible playbooks to set up laptops (including getting any minor secrets that you need onto that laptop. Restrict more important stuff to just ssh).
If your threat model doesn't include physical tampering/rootkits, just wipe your devices pre-travel and set it up when you get where you're going. If it does and you can afford to mitigate that risk, arrange to have cheap new devices at your destination and travel with nothing.
- darksaints 8y agoIf you're going that route, why not just create a disk image and scp it from your server? Certainly a lot easier than trying to rebuild everything from scratch.
- busterarm 8y agoAn ansible playbook gives you much more flexibility to get to the same place. The one I run takes a mere 3-5 minutes to run (typically) regardless of where I am in the world.
- DDub 8y agoactually I'd find running my ansible playbook much, much easier than transferring GB of disk image about. I maintain the playbook so that I can keep work laptop and personal laptop in sync. Although I am looking at Nixos as a possible replacement.
- eptcyka 8y agoWould work if you trusted that the devices weren't tampered during inspection. Why would I put my keys on something which might've been wiretapped? If you really need to compute whilst traveling or through the states, just buy something cheap whilst you're there.
- busterarm 8y agoI literally suggested that if you read my comment.