Skip to content

[RFE] flatcar-install: support LUKS/Clevis #1991

@x4e-jonas

Description

@x4e-jonas

Current situation

Using Flatcar with LUKS is partially supported though ignition: https://www.flatcar.org/docs/latest/setup/security/luks/

However, the setup mentions many trade-offs and various experimental feature flags.

Impact

Deploying Flatcar with encrypted drives is not straight forward.

Ideal future situation

Add LUKS/Clevis support through a parameter in flatcar-install to make it easier to bootstrap instances with encrypted disks.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    📝 Needs Triage

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions