From fb0393fbb13a6883fa7830870b13d6ac9a1f1c35 Mon Sep 17 00:00:00 2001 From: Arslaan Pathan Date: Fri, 4 Sep 2026 16:45:39 +1200 Subject: [feat] change of plans, LAST TIME (source: trust me bro) switch to pkgsrc because Nix is not going to work --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index aa90a76..6504610 100644 --- a/README.md +++ b/README.md @@ -60,7 +60,7 @@ The following notes are for myself so I can remember what hardening features to - Atomic updates with dm-verity - Wayland by default - Chimera userland (chimerautils/FreeBSD ported) -- Nix package manager +- pkgsrc (NetBSD) package manager - prefix set to ~/.local/yerbapkg - Runit init system (minimal attack surface) - Might be changed to OpenRC - Secure Boot (TPM) - Decoy/duress PIN - PAM module, wipe all user-controlled partitions and reboot immediately @@ -85,7 +85,7 @@ The following notes are for myself so I can remember what hardening features to - **nvram** (128MB) | LUKS | FAT32 | `/nvram` | NVRAM for root flags and selected slot - **rootfs_A** (15GB) | LUKS + dm-verity (atomic) | btrfs | `/` (if selected slot) | Root filesystem — Slot A - **rootfs_B** (15GB) | LUKS + dm-verity (atomic) | btrfs | `/` (if selected slot) | Root filesystem — Slot B -- **userdata** (Rest of disk) | LUKS | btrfs + subvol (nix) | `/home`, `/nix` | User files +- **userdata** (Rest of disk) | LUKS | btrfs + subvol (home) | `/home` | User files --- -- cgit v1.2.3