OPAL disk encryption
Summary
Instead of messing about with partitioning space between rootfs/home, or making some complicated mechanism to dynamically resize the rootfs, we can instead use OPAL
Reasoning
- OPAL is already used (just with a null key) on many/most modern drives
- Auto-resizing a loopback file rootfs is racy, and manually resizing is complicated
- having a fixed-size rootfs as a partition is a bad idea for various reasons. Users needs may always change after they've installed the OS
Prior Art
This was discussed at 2023 Image-based summit in Berlin