diff options
| author | edef <edef@edef.eu> | 2017-07-05 14:21:49 +0200 |
|---|---|---|
| committer | Franz Pletz <fpletz@fnordicwalking.de> | 2017-07-26 08:45:50 +0200 |
| commit | 10c6df2e3c2b9d208071447bcd76e4e28e4e12dc (patch) | |
| tree | 7ac5f86267567276dbb2c7a4a87f547249fb3bef /pkgs/development/python-modules/httpserver | |
| parent | 4244a16917ea3392b9360e57292e1fab603ed5ef (diff) | |
nixos/…/swap.nix: don't create a LUKS header for randomEncryption
Creating and then erasing the key relies on the disk erasing data
correctly, and otherwise allows attackers to simply decrypt swap just
using "secretkey". We don't actually need a LUKS header, so we can save
ourselves some pointless disk writes and identifiability.
In addition, I wouldn't have made the awful mistake of backing up my swap partition's LUKS header instead of my zpool's. May my data rest in peace.
Diffstat (limited to 'pkgs/development/python-modules/httpserver')
0 files changed, 0 insertions, 0 deletions