Hello fellow Guix users,

I want to decrypt a LUKS-encrypted device from a keyfile that is stored in a USB drive upon boot. The goal of this setup is to have the USB drive act like a key, and the computer cannot be decrypted without it. The process goes something like this:

  1. Insert USB drive containing keyfile.
  2. Boot computer.
  3. USB drive is automatically mounted.
  4. LUKS volumes are decrypted using the keyfile from the USB.

The Guix manual mentions that this keyfile can be declared in luks-device-mapping as an argument called, #:key-file. However, it does not go into further detail on how to make this file available during boot:

Key file is not stored in the store and needs to be available at the given location at the time of the unlock attempt.

Does anyone have a working configuration? Or can at least point me in the right direction?

Any help would be greatly appreciated.

[–] 4 points 7 months ago

Use declarative systems and software, where the configurations files themselves are the documentation. For example, I use Guix and Podman. The entire OS is described in a Scheme file and all the services are described in a YAML file. I just need those two files to get an overview of the entire setup.

  • source
  • [–] 3 points 7 months ago*

    You do not need a static IP address or dynamic DNS if your domain registrar provides a REST API. My current registrar is Porkbun and they have a REST API. I simply have a cron job that regularly checks if my public IP[^1] differs from the domain's A-record. If it does, it updates the record to match the public IP address using their API.

    [^1]: I use Porkbun's ping endpoint to obtain my public IP. There are also alternatives such as Ipify.

  • source
  • [–] 15 points 1 year ago (1 child)

    Steam is not a subscription service

    Steam provides a cloud service. Not dissimilar to other subscription-based services. Had they been using AWS, they would also have been affected by the outage, resulting in Steam also being mentioned in the headline. So it's just as relevant as the others.

    you'll never own a piece of software by buying it in a video game store.

    Sure, I'm both granted a license on both Steam or GOG, but the crucial difference is still about offline access. If GOG stopped existing tomorrow, I'd still be able to install, and play, all my GOG games. The same cannot be said for Steam. Which one, then, grants the most ownership? License or no license.

  • source
  • parent
  • context
  • [–] 28 points 1 year ago (3 children)

    It IS a scam since a lot of subscription services do not make it clear that the buyer is only granted limited access, and not ownership of the product.

    Just last year, due to legal reasons, Steam placed a notice on their cart page stating that purchases only grant a licenseβ€”much to the surprise of some Steam users. Steam has been around for 20+ years, and it took a piece of legislation to force the company to inform their buyers of this very important fact. It is clear that they would rather have misinformed customers, much like in a scam.

  • source
  • parent
  • context
  • [–] 5 points 1 year ago* (1 child)

    Everyone should have this mindset regarding their data. I always say to my friends and family, "If you like it, download it.". The internet is always changing and that piece of media that you like can be moved, deleted, or blocked at any time.

  • source
  • parent
  • context
  • [–] 4 points 1 year ago

    I host many services on my server. Just to list a few: my website, Jellyfin, Lemmy, a Monero node, and Nextcloud.

    My main reasons for choosing home-hosting over cloud-hosting are:

    • Full Privacy
    • Complete Data Ownership
    • Local Access
  • source
  • view more: next β€Ί