diff --git a/linux/nix/README.md b/linux/nix/README.md index 5996e806..ba9e0931 100644 --- a/linux/nix/README.md +++ b/linux/nix/README.md @@ -6,15 +6,7 @@ ## disk encryption -Physicial disk may borked, and you need to repair it by send it back to the manufacturer. In this case, you may have some sensitive data on it and you would suffer from data leakage, because the manufacturer may not be trusted, and they can read data directly from the disk. - -so the best way to protect your data is to encrypt the disk all the time, you can encrypt the disk with a password to protect your data. - -https://gist.github.com/ladinu/bfebdd90a5afd45dec811296016b2a3f - -https://www.reddit.com/r/NixOS/comments/xrgszw/nixos_full_disk_encryption_with_tpm_and_secure/ - -https://github.com/NixOS/nixpkgs/blob/nixos-23.05/nixos/doc/manual/configuration/luks-file-systems.section.md + ## devbox 调研