| 30 Jul 2025 |
K900 | There are options, yes | 20:14:35 |
emily | (with complicated trade-offs) | 20:16:13 |
emily | (and not ones that are easy to deploy mutable NixOS systems to) | 20:16:19 |
DenKn | I do not need encryption, but signing would be interesting in such cases. I only want to mount encrypted data, but mostly the system could be only signed | 20:18:30 |
emily | dm-verity is used for this in production | 20:20:33 |
emily | but is only really suitable for image deploys | 20:20:37 |