Lower Compromises ZFS Encryption on NixOS
I’ve started using a ZFS root filesystem on all of my computers now. Various wants on different systems have led to me using ZFS native encryption on some systems, and ZFS on LVM on LUKS on some others. I’ve had a chance to feel out both options, and I’ve learned a bunch in the meantime, so I decided to try something else now.
This post gets into a scheme that allows a single self contained zpool to offer LUKS key managent and unlocking options on NixOS.