diff options
| author | Arslaan Pathan <[email protected]> | 2026-09-04 11:38:51 +1200 |
|---|---|---|
| committer | Arslaan Pathan <[email protected]> | 2026-09-04 11:38:51 +1200 |
| commit | 661a50cb4983c3123973b86e1dbaee7452bd9298 (patch) | |
| tree | 4b329b124f917b3b97b2c3d4b5f181e745538e3e /README.md | |
| parent | d69ef0571e912e4bb4a98f86e98b36bf02d04cb7 (diff) | |
| download | yerbalinux-661a50cb4983c3123973b86e1dbaee7452bd9298.tar.xz yerbalinux-661a50cb4983c3123973b86e1dbaee7452bd9298.zip | |
[feat] change of plans, Nix time because Homebrew doesn't like musl libc and also Ruby sucks
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -60,7 +60,7 @@ The following notes are for myself so I can remember what hardening features to - Atomic updates with dm-verity - Wayland by default - Chimera userland (chimerautils/FreeBSD ported) -- Homebrew as the default package manager (no system-wide packages! Security™) +- Nix package manager - Runit init system (minimal attack surface) - Might be changed to OpenRC - Secure Boot (TPM) - Decoy/duress PIN - PAM module, wipe all user-controlled partitions and reboot immediately @@ -85,7 +85,7 @@ The following notes are for myself so I can remember what hardening features to - **nvram** (128MB) | LUKS | FAT32 | `/nvram` | NVRAM for root flags and selected slot - **rootfs_A** (15GB) | LUKS + dm-verity (atomic) | btrfs | `/` (if selected slot) | Root filesystem — Slot A - **rootfs_B** (15GB) | LUKS + dm-verity (atomic) | btrfs | `/` (if selected slot) | Root filesystem — Slot B -- **userdata** (Rest of disk) | LUKS | btrfs | `/home` | User files +- **userdata** (Rest of disk) | LUKS | btrfs + subvol (nix) | `/home`, `/nix` | User files --- |