An explanation of how to enable secure boot on NixOS, using a
community project named ‘Lanzaboote’, and further how to
automatically unlock a LUKS-encrypted disk using a TPM with
systemd-cryptenroll.

Lobsters is a community-driven platform for sharing and discussing links to articles, tutorials, and projects related to technology and programming. Readers can learn about a wide range of topics, from software development and system administration to cybersecurity and artificial intelligence. With user submissions, comments, and voting, Lobsters provides a platform for collaborative learning and knowledge sharing among technology enthusiasts.

Lobsters

Learn how to enable Secure Boot and TPM-backed full disk encryption on NixOS. Understand the purpose and functionality of TPM and Secure Boot.

Secure Boot & TPM-backed Full Disk Encryption on NixOS