Didn’t look at the article but ya if you want to leverage SEDs then LUKS is the way to go.

JXL is based.

Holy cow that’s long

What if I don’t want to do anything?

Right now I’m solving this by having two separate ingress controllers in one cluster - one for private stuff only available over a vpn, and one only available over public ips.

How’s this working out? What kinda alternatives are there with a single cluster?

They actually got better? Nice work

When installing an encrypted Arch system, I couldn’t figure out how to change the keymap in GRUB stage 1, which asks for the passphrase and then decrypts /boot. I just entered my passphrase with the default en-us keymap without really knowing what characters it outputs.