cryptboot
btrfs-todo
cryptboot | btrfs-todo | |
---|---|---|
5 | 8 | |
199 | 18 | |
- | - | |
0.0 | 10.0 | |
5 months ago | over 3 years ago | |
Shell | ||
GNU General Public License v3.0 only | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
cryptboot
-
Setting up Secure Boot, but the wiki doesn't provide enough info I think
I just completely cheated by using cryptboot. Then it is as simple as cryptboot-efikeys create, then to enroll them into your eufi, cryptboot-efikeys enroll and finally to sign any efi executable (or any file), cryptboot-efikeys sign $FILE. There are other helper scripts, but I don't use them. Full documentation is on their GitHub: https://github.com/xmikos/cryptboot. Good luck!
- Authenticated Boot and Disk Encryption on Linux
-
Physical security tips & recommendations
Prevent evil maid by bringing your devices everywhere. Or you can just switch to GNU/Linux and add https://github.com/xmikos/cryptboot
-
Unencrypted boot partition risks
I think it was this one: https://github.com/xmikos/cryptboot
-
Cool new things on linux world for fresh installation and a bit of my usage different things.
Also, I am pretty sure that you can only have encrypted /boot if you use GRUB. The point of doing so is not really to make sure nobody reads it (there isn't anything interesting on /boot by default), but to make sure that nobody can tamper with it (ignoring the encryption vs authenticated encryption discussion). However, you still have to make sure nobody can tamper with GRUB itself. You might want to check out https://github.com/xmikos/cryptboot if this sounds interesting. Also, there are similar solutions that don't use encrypted /boot, for example booting from signed EFISTUBs, see https://wiki.archlinux.org/index.php/Unified_Extensible_Firmware_Interface/Secure_Boot#Implementing_Secure_Boot. Also, I don't actually use this kind of setup personally (albeit I'd like to one day), and I am certainly not a security expert, so take this whole paragraph with a big grain of salt, and double check with somebody who actually knows what they are talking about.
btrfs-todo
-
btrfs-cleaner high CPU utilization and severe performance issues - fyi
It should be resolved with "Tree extension V2" https://github.com/btrfs/btrfs-todo/issues/25
-
How can I modify a partition, subvolume or folder to be case-insensitive?
You could open a feature request at https://github.com/btrfs/btrfs-todo/.
-
ZFS vs Btrfs in 2022
Thankfully, much of the work with extent tree v2 will address most of these issues, so expect this to improve in the next year or two.
-
[GIT PULL] Btrfs updates for 6.1
Pretty sure that will become possible/easier with Extent tree v2.
- Send bcachefs some love!
- Btrfs Extent Tree v2
-
Btrfs Extent Tree v2 Work Progressing For Improving The File-System's On-Disk Format
For actual details: https://github.com/btrfs/btrfs-todo/issues/25
-
Authenticated Boot and Disk Encryption on Linux
fscrypt support for btrfs is still being planned; see the most recent comments at https://github.com/btrfs/btrfs-todo/issues/25
What are some alternatives?
sbctl - :computer: :lock: :key: Secure Boot key manager
tpm2-totp - Attest the trustworthiness of a device against a human using time-based one-time passwords
dotfiles - :unicorn: My personal dotfiles
heads - A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
pkgbuild-linux-bcachefs - PKGBUILD for Linux with bcachefs support
safeboot - Scripts to slightly improve the security of the Linux boot process with UEFI Secure Boot and TPM support
sbupdate - Generate and sign kernel images for UEFI Secure Boot on Arch Linux
mortar - Framework to join Linux's physical security bricks.
ansitest - ansible test stuff and root/bin bash scripts for Linux / OSX admins