luks-encryption

Script for boostrapping Arch Linux with BTRFS, snapshots and LUKS encryption (UEFI only).

A complete Arch Linux installation guide with luks2 full disk encryption, and logical volumes with lvm2, and added security using secure boot and tpm2 luks key enrollment for auto unlocking encrypted root.

A minimalistic and user friendly POSIX initramfs generator, designed for encrypted systems

Flake-based, literate nix config for personal infrastructure

Technical guides covering GNU/Linux including: Arch Linux, Artix Linux, Libreboot and more.

Open source platform for covert data exfiltration operations, supporting all device types: computers, servers, mobile phones, tablets, pen drives and photo cameras.

My Nix ecosystem journey, from the first commit to currently running configs

Arch Install Guide (BIOS + LUKS + BtrFS + LVM + GRUB)

My Arch Linux setup for a lean, secure, command-line driven development environment with modular configuration management using shell scripts.

This repository is prepared especially for participants of the Polish training course "Secrets of TPM (in)security". It offers practical demos and tools to explore TPM security features and vulnerabilities, providing insights into hardware trust mechanisms.

My personal Arch Linux install script using LUKS2 encryption, LVM and btrfs with optional RAID1.

Artix Linux LUKS encrypted disk minimal installation script.

Connecting to your service behind a NAT using ICE while using syncthing for signalling

Automated minimalistic Arch Linux installation with an encrypted file system in UEFI mode.

Bash script to auto-setup a Debian 13 LUKS Full Disk Encryption OS

Instalador y configurador para Arch Linux

A UEFI Bootloader in C

Step by step guide on how to install arch linux on your machine and configure it with full disk encryption using LUKS and LVM2. As well as using systemd-boot for boot.

Polls a remote Dropbear server until it becomes available, then connects and unlocks the LUKS partition.

A documented, reproducible security-hardening project for a dedicated Linux administration endpoint. This project demonstrates how I approached a privileged workstation as a security boundary rather than as a general-purpose laptop. The focus is on defense in depth, least privilege, runtime validation, reproducibility, and recovery.