https://peertube.watch/videos/watch/d6213b7a-0052-4709-94d8-0f59a2f80837 If you use, or want to use, full-disk encryption on your server, you might have been bothered by the problem of unattended reboots. Clevis is a decryption framework which binds secrets against a secure resource (a secure cryptographic protocol to reach a remote Tang server or a TPM) to mount the root partition. Clevis is now part of NixOS, available in the initrd and can be set up declaratively for LUKS, ZFS and Bcachefs. This talk will briefly explain the Clevis-Tang protocol and show you how to set it up on your NixOS machines. Speakers: Julien Malka, Camille Mondon, Track: Nix and NixOS devroom, Room: H.1302 (Depage), When: Sunday 4 February 2024, 12:00–12:25 (Brussels time), Schedule: FOSDEM 2024 event page, Slides & links Slides, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “Clevis/Tang: unattended boot of an encrypted NixOS system” by Julien Malka, Camille Mondon, FOSDEM 2024. Original recording: 2024/h1302/fosdem-2024-3044-clevis-tang-unattended-boot-of-an-encrypted-nixos-system.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Tue, 27 Oct 2026 23:30:01 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/d6213b7a-0052-4709-94d8-0f59a2f80837 All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.