<flokli>
With systemd master (or an already open PR), it should be possible to use a yubikey to decrypt a luks keyslot
<gchristensen>
oh nice
<flokli>
With in-initrd systemd, this should even be possible for the root container
<flokli>
Homed is a bit more than that
<flokli>
Basically, homedirs can be encrypted loop mounts, and the key to decrypt can come from your unlock password
<flokli>
So it can wipe the decryption key from ram before suspending (freeze the volume), and can use the key later on
<flokli>
Same with yubikeys there as well if I'm not mistaken
<flokli>
The homed part is understandably quite new and controversial. But all the groundwork for better interaction and integration of crypto volumes did land in systemd too
<flokli>
Which is another reason for why I want to finally fix the cryptsetup stuff :-D
<flokli>
(systemd with cryptsetup support, that is)