Hardening with LUKS2, Secure Boot, and TPM2
Combine disk encryption, boot verification, and runtime access control while retaining a recovery route for each layer.
Security
Articles about Security.
8 articlesFollow a reading path
sops principles: hybrid encryption and recipients
Understand the boundaries of encrypted version control, data keys, and authorization for multiple recipients.
sops-nix integration: runtime, ordering, and SSH host keys
Connect encrypted source files, runtime secret files, and service dependencies.
sops usage guide: command-line operations
Edit encrypted files, inspect their status, and manage recipients and data keys.
sops configuration templates and runtime rendering
Understand encryption rules, sops-nix configuration, and runtime placeholders field by field.
sops key migration and rotation
Migrate keys through a two-recipient transition, distinguishing authorization updates from credential revocation.
GitHub repository management
Establish repository documentation, permissions, merge rules, and releases as a verifiable governance contract.
GitHub Actions security and troubleshooting
Locate CI risks and failures across event, permission, credential, runner, and supply-chain boundaries.
No articles match all of these filters.