diff options
| author | Craig Jennings <c@cjennings.net> | 2026-01-18 18:53:47 -0600 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-01-18 18:53:47 -0600 |
| commit | 031c6102f42184d8b6614695760fd11249b1c5f2 (patch) | |
| tree | 28580a48617253afc954663f1cef71f8cbd19142 /custom/install-archzfs.conf.example | |
| parent | 3884ae1ef9bfcb5fbd02535d2d69e2d7cacfa4e0 (diff) | |
| download | archangel-031c6102f42184d8b6614695760fd11249b1c5f2.tar.gz archangel-031c6102f42184d8b6614695760fd11249b1c5f2.zip | |
Make ZFS encryption optional with interactive prompt
Add get_encryption_choice() to ask user whether to enable encryption
during interactive install. Remove --no-encrypt CLI flag in favor of
config file NO_ENCRYPT option for unattended installs. Update tests
to rely on config file setting instead of flag.
Also: fix ISO label to ARCHZFS for stable GRUB entries, add TODO items.
Diffstat (limited to 'custom/install-archzfs.conf.example')
| -rw-r--r-- | custom/install-archzfs.conf.example | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/custom/install-archzfs.conf.example b/custom/install-archzfs.conf.example index 813b359..0060cc0 100644 --- a/custom/install-archzfs.conf.example +++ b/custom/install-archzfs.conf.example @@ -47,8 +47,13 @@ RAID_LEVEL= # This will be required at every boot to unlock the pool ZFS_PASSPHRASE=changeme -# Disable ZFS encryption (optional, for testing only) -# Set to "yes" to skip encryption - NOT recommended for real installs +# Skip ZFS encryption (optional, default: no) +# Set to "yes" to create an unencrypted pool +# Use cases: +# - VMs or test environments +# - Systems with hardware encryption (SED drives) +# - Data that doesn't require encryption +# WARNING: Without encryption, anyone with physical access can read your data #NO_ENCRYPT=no # Root password (required) |