DigiNews

Tech Watch by Johan Denoyer

← Back to articles

Passphrase-less reboots using kexec under NixOS

Quality: 8/10 Relevance: 9/10

Summary

Passphrase-less reboots using kexec on NixOS enables secure, faster reboots by passing LUKS keys via RAM during a kexec-based kernel swap, avoiding manual passphrase entry while preserving full-disk encryption. The article details approaches to generate temporary LUKS keyslots, embed one-time passphrases in initramfs, and implement a custom systemd workflow to automate the process.

🚀 Service construit par Johan Denoyer