q2dg

5 ms·

1. 31.▲
   by q2dg 3y ago

   I use systemd-nspawn as a built-in alternative to LXC/LXD.
2. 32.▲
   by q2dg 3y ago

   Yes, that's was the reason of my question: there are several mechanisms to not need to provide credentials anyway (interactively). But @yokaze has pointed to a situation where this has sense. Thanks!
3. 33.▲
   by q2dg 3y ago

   Ah, I see the point: the use case is not the robbery of a computer but the robbery of an encrypted disk alone. If it's extracted from its hardware key escrow environment (a TPM, for instance) then won't be able to boot. Aha! Thank
4. 34.▲
   What's the point of automatic on-boot decrypting LUKS volumes?

   3 points by q2dg 3y ago|4 comments