News for hackers. Stuff that matters.

A comment on I picked up a shitty NUC from ewaste and it had a label on it for an AI company. Parent comment

Re:I picked up a shitty NUC from ewaste and it had a label o... by pacificenigma on Tuesday August 20, 2024 @10:01AM (#41300162)
For years I've used https://github.com/anatol/booster to unlock LUKS partitions using network bound disk encryption with https://github.com/latchset/clevis and https://github.com/latchset/tang. Works well, especially as Tang is stateless (so deployment and high availability is easy) and Booster falls back to password entry if Tang is unavailable.
[ Parent | on HN ]
Re:I picked up a shitty NUC from ewaste and it had a label o... by aflukasz on Wednesday August 21, 2024 @09:16AM (#41309984)
Thumbs up for clevis/tang, happy user here, too!

Did not hear about booster. Its README claims "Clevis style data binding. The encrypted filesystem can be bound to TPM2 chip or to a network service.". Does it mean that it tries to deliver various bindings independently from clevis pins, even when duplicating their functions?

[ Parent | on HN ]