β-Redex Reducing Member
- Sep 13, 2016
- Lambda Centre
Actually, I am not lucky. I once had issues with decryption at boot time. After an upgrade I could not decrypt my hard disk anymore. But:
1. NixOS has rollback.
2. I make unencrypted back-ups which I store at a safe location at all times.
So in that case I just rolled back and quickly solved the issue and then upgraded again. The Pyra has no roll-back feature, but back-ups alone are good enough too. It just means that restoring the system will take longer and that I will have to wait until I am home. That is acceptable to me.
So imagine that my Pyra has decryption issues and cannot decrypt anymore. What happens? I wait until I am home and then re-install everything and restore from back-up. Problem solved. Much preferable over me losing my Pyra and someone else finding it and then viewing my data. The risks of encryption are very low if one keeps proper back-ups, which one ought to anyway.So lets make thing clean. Say you're encrypting the whole system (excluding /boot or not), then if you cant decrypt it at boot, your only option will be to reflash to be able to use your pyra. But then all your sensible data that goes with it are lost too. If you dont encrypt the whole system, but only your user data, if for some reason decryption doesnt happen, you still have a valid system to debug your issue. Your data aren't lost (just yet) and you have some tools at hand to analyze/fix your issue.
If losing your sensible data is not an issue, then why willing to encrypt it in the 1rst place ?
BTW, what are "lambda users"?