-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
And one more option is to use clevis binding framework that is essentially a key management for a LUKS partition. Clevis supports network binding (deriving partition key from a Tang network service) and TPM binding (deriving partition key from TPM private key).
I am using secure boot with custom keys, a fully encrypted root btrfs partition with /boot on it, with swap also encrypted with hibernation support. The only non-encrypted partition is the EFI partition with boot images signed with https://github.com/andreyv/sbupdate (look up "direct booting").
Related posts
-
Stealthy UEFI malware bypassing Secure Boot enabled by unpatchable Windows flaw
-
BlackLotus UEFI bootkit: Myth confirmed
-
Secure boot, sbupdate and systemd-boot
-
Can someone help me navigate the BIOS settings without display?
-
Windows 11 requiring to turn on Secure boot, making dual boot a little harder