0 Releases 4 Tags

RSS Feed

• v2.2.0 69779919e5

  Compare

  - Optional remote LUKS unlock via a Tor onion service in the initramfs.

  kevinveenbirkenbach released this 2026-07-21 17:09:25 +00:00 | 12 commits to master since this release

  Encrypted image setups can bake tor into the initramfs (mkinitcpio hooks
  ordered netconf tor dropbear encryptssh), generate the v3 onion keys
  offline in the image chroot, and print the stable .onion address. Unlock
  with torsocks ssh root@. Useful behind NAT/CGNAT or a
  dynamic IP, where the direct ssh root@ unlock cannot reach the host.

  • End-to-end tests: a rootless one (LIM_E2E_TOR=1) that round-trips a
    passphrase through a real Tor onion service, and a full virtualized one
    (LIM_E2E_QEMU=1) that builds a LUKS image, boots it in QEMU, and unlocks
    the root over Tor. The offline onion keygen runs in CI; make test-tor /
    make test-qemu / make test-all run the opt-in stages.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)