From 031c6102f42184d8b6614695760fd11249b1c5f2 Mon Sep 17 00:00:00 2001 From: Craig Jennings Date: Sun, 18 Jan 2026 18:53:47 -0600 Subject: Make ZFS encryption optional with interactive prompt Add get_encryption_choice() to ask user whether to enable encryption during interactive install. Remove --no-encrypt CLI flag in favor of config file NO_ENCRYPT option for unattended installs. Update tests to rely on config file setting instead of flag. Also: fix ISO label to ARCHZFS for stable GRUB entries, add TODO items. --- custom/install-archzfs.conf.example | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'custom/install-archzfs.conf.example') diff --git a/custom/install-archzfs.conf.example b/custom/install-archzfs.conf.example index 813b359..0060cc0 100644 --- a/custom/install-archzfs.conf.example +++ b/custom/install-archzfs.conf.example @@ -47,8 +47,13 @@ RAID_LEVEL= # This will be required at every boot to unlock the pool ZFS_PASSPHRASE=changeme -# Disable ZFS encryption (optional, for testing only) -# Set to "yes" to skip encryption - NOT recommended for real installs +# Skip ZFS encryption (optional, default: no) +# Set to "yes" to create an unencrypted pool +# Use cases: +# - VMs or test environments +# - Systems with hardware encryption (SED drives) +# - Data that doesn't require encryption +# WARNING: Without encryption, anyone with physical access can read your data #NO_ENCRYPT=no # Root password (required) -- cgit v1.2.3