@astraleureka @dalias @anthropy Checkbox where?
Who is authorized to check it, and how are others prevented?
How is the setting persisted?
How does it interact with secure boot and disk/filesystem encryption?
How do you troubleshoot and repair it when it’s [un]checked incorrectly?
Conversation
Notices
-
Embed this notice
Marsh Ray (marshray@infosec.exchange)'s status on Tuesday, 06-Jan-2026 09:50:54 JST
Marsh Ray
-
Embed this notice
Rich Felker (dalias@hachyderm.io)'s status on Tuesday, 06-Jan-2026 09:50:54 JST
Rich Felker
@marshray @astraleureka @anthropy Exactly. It has to be part of the configuration within the guest, stored in the guest filesystem. It could be offered as a "checkbox" in the installer for the guest distro. But it should require explicit, distro-specific configuration, not just dropping a file in a standard place systemd checks or some bs like that. Or hosts would just start dropping that in.
-
Embed this notice