Fedora LUKS2 + TPM2 + Secure Boot
Set up, manage, and recover Fedora full-disk encryption with LUKS2 + TPM2 + PIN bound to PCRs 7 and 14, with a passphrase fallback in slot 0.
Set up, manage, and recover Fedora full-disk encryption with LUKS2 + TPM2 + PIN bound to PCRs 7 and 14, with a passphrase fallback in slot 0.
Encrypt Kubernetes secrets at rest with Mozilla SOPS and age, decrypt them in-cluster via the Flux SOPS provider.