2026-10-28 20:56 UTC
So, I still have this little Intel Nuc that I used to test Guix System during Christmas break 2024 (thread here: https://fediscience.org/@Guillawme/113611195137420871 ). I ended this experiment, but will probably use Guix again one way or another, sometime.
At the moment there is a Debian 13 system on this computer. Quite easy to set up, which saved me mental bandwidth to learn other things with it.
I managed to set up remote decryption of the luks partition following this tutorial: https://www.cyberciti.biz/security/how-to-unlock-luks-using-dropbear-ssh-keys-remotely-in-linux/
Almost got it working over wifi following this other guide: https://www.marcfargas.com/posts/enable-wireless-debian-initramfs/
But it only works episodically and most of the time doesn't. I haven't figured out why. So I saved the config files and will end this experiment too. Given how Debian is embracing LLM coding, I feel like trying something else.
The next experiment will be NetBSD. I started reading the manual. I booted the installer and figured that this computer's wifi card is supported: very nice to see!
I am sure this will remain an experiment for now, because it doesn't seem straightforward to set up full-disk encryption with NetBSD (and I am not letting any of my files near a computer without this feature). But who knows, maybe this will become easier in a future version. Learning a bit more about it now seems like fun either way. Will post in this thread as I go. Probably not as much as I did on the Guix thread, because I don't have more free time now than I did back then.
Replies (1)
-
@khinsen@scholar.social 2026-10-29 08:25
@Guillawme@fediscience.org My encryption plan for my @netbsd@mastodon.sdf.org experiments is based on ZFS. Warning: plan only, I haven't tried it yet. Here are instructions: https://artemis.sh/2026/10/23/netbsd-encrypted-zfs.html You can't have ZFS for the root filesystem in NetBSD, so you won't have full-disk encryption. That's fine with me. I'd have nothing but public data (mostly software) on the root partition, with everything else in encrypted ZFS datasets. That's already how I work today under Linux.