@rixx @jyn I feel like this is relevant to @thomholwerda

@rixx @jyn used to use `extra/mkinitcpio-systemd-tool` for this kind of thing.. not sure how tailscale fits in to it tho

@rixx @jyn or: install #bitlocker.

@rixx @jyn This doesn't look much different to using the dropbear-initramfs on Debian, which is a standard supported way of remotely unlocking an encrypted root.