Re: [systemd-devel] fstab automount of a mdns samba share

2021-09-30 Thread Julian Sikorski
W dniu 28.09.2021 o 10:34, Colin Guthrie pisze: Julian Sikorski wrote on 28/09/2021 07:37: W dniu 27.09.2021 o 16:38, François Cami pisze: Hi, On Mon, Sep 27, 2021 at 4:05 PM Julian Sikorski wrote: Hi list, I am trying to set up an automount of my samba share. It works when I go by the

Re: [systemd-devel] dm-integrity volume with TPM key?

2021-09-30 Thread Sebastian Wiesner
Hello, thanks for quick reply, I guess this explains the lack of instructions ^^ As a workaround you'd use a regular file key for dm-integrity and put that on a TPM-protected partition, if I understand you correctly? I.e. you'd 1. enable secureboot (custom keys or shim), 2. bundle kernel &

Re: [systemd-devel] Authenticated Boot and Disk Encryption on Linux

2021-09-30 Thread Łukasz Stelmach
Lennart Poettering writes: > On Mi, 29.09.21 21:09, Łukasz Stelmach (stl...@poczta.fm) wrote: >> Hi, Lennart. >> >> I read your blog post and there is little I can add regarding >> encryption/authentication*. However, distributions need to address one >> more detail, I think. You've mentioned

Re: [systemd-devel] Authenticated Boot and Disk Encryption on Linux

2021-09-30 Thread Lennart Poettering
On Mi, 29.09.21 21:09, Łukasz Stelmach (stl...@poczta.fm) wrote: > Hi, Lennart. > > I read your blog post and there is little I can add regarding > encryption/authentication*. However, distributions need to address one > more detail, I think. You've mentioned recovery scenarios, but even with >

Re: [systemd-devel] dm-integrity volume with TPM key?

2021-09-30 Thread Lennart Poettering
On Mi, 29.09.21 21:53, Sebastian Wiesner (sebast...@swsnr.de) wrote: > Hello, > > "Authenticated Boot and Disk Encryption on Linux" [1] suggests to "make > /home/ its own dm-integrity volume with a HMAC, keyed by the TPM" when > using systemd-homed for user home directories. > > I'd like to try