https://github.com/jmcorgan/fips-initramfs/releases/tag/v0.1.0
fips-initramfs 0.1.0 is out.
Unlock a LUKS-encrypted server over a FIPS mesh, from anywhere. No static IP, no port forwarding, no inbound reachability at all. The machine dials out to its peers during early boot and comes up at the same mesh address every time. You record that address once at install, then unlock with a single ssh command.
Console passphrase entry always still works, so a failure leaves you at the normal prompt instead of stranded.
Tested end to end on Debian 12 and 13 and Ubuntu 22.04, 24.04 and 26.04: real encrypted machines, booted and unlocked over a live mesh.
MIT licensed, .deb for amd64:
https://github.com/jmcorgan/fips-initramfs/releases/latest
#fips #linux #luks