corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0878e-8a9a-732f-b232-650590fdef69

Secure Boot & TPM-backed Full Disk Encryption on NixOS

Blog · Jon Seager · published 20 April 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at jnsgr.uk Wayback capture
1blogs citing
First cited
16 Jan 2025
Most recent
16 Jan 2025
Rank this month
not ranked
Links from this post
33
Words captured
3,462

Cited by

Blog
In the post
Date
oddlama.org
Bypassing disk encryption on systems with automatic TPM2 unlock Read at the source ↗
16 Jan 2025

Links from this post

Link
Host
Bypassing disk encryption on systems with automatic TPM2 unlock Read at the source ↗
oddlama.org
https://www.man7.org/linux/man-pages/man5/crypttab.5.html
man7.org
https://trustedcomputinggroup.org/resource/tpm-library-specification/
trustedcomputinggroup.org
https://www.gradient.tech/faq-items/what-are-platform-configuration-registers-pcrs/
gradient.tech
https://en.wikipedia.org/wiki/Evil_maid_attack
en.wikipedia.org
https://en.wikipedia.org/wiki/PKCS_11
en.wikipedia.org
https://en.wikipedia.org/wiki/UEFI
en.wikipedia.org
https://github.com/rhboot/shim
github.com
https://wiki.archlinux.org/title/Unified_kernel_image
wiki.archlinux.org
https://uapi-group.org/specifications/specs/unified_kernel_image/
uapi-group.org
https://linuxconfig.org/recover-reset-forgotten-linux-root-password
linuxconfig.org
https://hackaday.com/2024/02/06/beating-bitlocker-in-43-seconds/
hackaday.com
https://en.wikipedia.org/wiki/Low_Pin_Count
en.wikipedia.org
https://uefi.org/revocationlistfile/archive
uefi.org
https://github.com/nix-community/lanzaboote
github.com
https://en.wikipedia.org/wiki/EFI_system_partition
en.wikipedia.org
https://www.freedesktop.org/software/systemd/man/latest/systemd-stub.html
freedesktop.org
https://github.com/NixOS/rfcs/blob/master/rfcs/0125-bootspec.md
github.com
https://search.nixos.org/packages?channel=unstable&show=sbctl&from=0&size=50&sort=relevance&type=packages&query=sbctl
search.nixos.org
https://github.com/jnsgruk/nixos-config/blob/e436e046f19c76fcea0ac2570e7a747153c02ad5/host/kara/boot.nix
github.com
https://nixos.wiki/wiki/Flakes
nixos.wiki
https://github.com/jnsgruk/nixos-config/blob/e436e046f19c76fcea0ac2570e7a747153c02ad5/flake.nix
github.com
https://github.com/jnsgruk/nixos-config
github.com
https://github.com/jnsgruk/nixos-config/blob/e436e046f19c76fcea0ac2570e7a747153c02ad5/lib/helpers.nix
github.com
https://github.com/latchset/clevis/
github.com
https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu
ubuntu.com
https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/
uapi-group.org
https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot
wiki.archlinux.org
https://discourse.nixos.org/t/full-disk-encryption-tpm2/29454
discourse.nixos.org
https://fosdem.org/2024/schedule/event/fosdem-2024-1985-ukis-tpms-immutable-initrds-and-full-disk-encryption-what-distributions-should-keep-in-mind-when-hopping-onto-the-system-integrity-train/
fosdem.org
https://fosdem.org/2024/schedule/event/fosdem-2024-3141-linux-kernel-tpm-security-and-trusted-key-updates/
fosdem.org
https://ericchiang.github.io/post/tpm-keys/
ericchiang.github.io
https://github.com/pimeys/
github.com