Self Encryption Drive

From NixOS Wiki
Revision as of 13:43, 8 October 2019 by imported>Azazel75 (Add information of using OPAL with NixOS)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

To encrypt your drive using the OPAL standard that many modern storage devices implement you have to follow the instructions on this page: https://github.com/Drive-Trust-Alliance/sedutil/wiki/Encrypting-your-drive

The relevant configuration bits for NixOS are here: https://gist.github.com/callahad/a42d1e7edeaffa68517405e35a173b56

Kernels since 19.03 do have the necessary option CONFIG_BLK_SED_OPAL to let this work on suspend/resume. See https://github.com/NixOS/nixpkgs/pull/56147

Please be aware that the use of this encryption raises some security concerns and maybe vulnerable to a number of security attacks, see:

and https://logs.nix.samueldr.com/nixos/2019-10-08#2661066

Retrieved from "https://wiki.nixos.org/w/index.php?title=Self_Encryption_Drive&oldid=7036"