Unlocking Encrypted ZFS Volumes with a Passkey
Summary
This article explains how to securely unlock ZFS encrypted datasets at boot using Revaulter and passkeys (WebAuthn) to avoid plaintext key storage. It covers architecture, setup steps, and a systemd based boot unlock workflow, highlighting security benefits and trade-offs for homelabs and small deployments.