I have Debian with ZFS native encrypted rootfs booting on a Radxa ROCK 5 ITX. The only remaining issue is that the passphrase isn't passed from ZFSBootMenu to Debian's initramfs, so it has to be entered twice. Should be fixable.
Conversation
Notices
-
Embed this notice
Ryan Castellucci (they/them) :nonbinary_flag: (ryanc@infosec.exchange)'s status on Friday, 14-Aug-2026 07:40:51 JST
Ryan Castellucci (they/them) :nonbinary_flag:
-
Embed this notice
Sudo Sudo Sudo ⒶⒺⓋ (prometheus@infosec.exchange)'s status on Friday, 14-Aug-2026 08:26:10 JST
Sudo Sudo Sudo ⒶⒺⓋ
@ryanc Lovely little challanges.
-
Embed this notice
muddle 🥣 (muddle@infosec.exchange)'s status on Friday, 14-Aug-2026 12:19:54 JST
muddle 🥣
@ryanc Can you pass arbitrary kernel parameters, or are they checked against a known list? If the former, you might be able to read it in the initramfs environment from /proc/cmdline?
I've never actually used ZFSBootMenu, but maybe there's a pass-through option like this...
-
Embed this notice