14:03 <sad_plan> hi

15:05 <sewn> hi sad_plan

16:15 <synimas> hello, currently looking at this wiki article https://wiki.archlinux.org/title/dm-crypt/Encrypting_an_entire_system#Simple_encrypted_root_with_TPM2_and_Secure_Boot and i was curious on how the systemd modules worked, because i dont have sysemd obvi lol

16:16 <synimas> ah nvm "This means that access to data is not protected in case the PC gets stolen." prob shouldnt bother

16:17 <synimas> maybe itll be possible to make the /boot encrypted with this and just unencrypt my main disk with initramfs

16:18 <synimas> what im asking is how does systemd-cryptenroll work basicaly

16:18 <sad_plan> you should be able to encrypt boot with a initramfs and grub. atleast afaik. Ive encrypted my bootdrive before when using artix

16:18 <synimas> this has secure boot and tpm support

16:19 <synimas> so it wont work if a new drive is put in or secure boot is off

16:19 <sad_plan> if your threatmodel requires that, maybe not use kiss?

16:20 <synimas> well ive got kiss installed, this is my fun laptop, why not go overboard

16:20 <sad_plan> sure

16:21 <synimas> good learning tool too, also why wouldnt i want to use kiss for a situation where this would actually be a good idea to do?

16:22 <sad_plan> because some things are harder to accomplish on kiss

16:22 <synimas> ah, agreed, everything is harder to accomplish on kiss

16:24 <sad_plan> not everything. but some things are harder on kiss

16:26 <synimas> found this, https://github.com/tpruzina/tpm-luks-initramfs, odd that its called a poor mans bitlocker even though its the same thing