Kai Lüke

The new Alpha will support clevis with a tang server but not keylime (I don't know the differences of tang and keylime yet to say what would be needed to...

We now have docs for TPM-backed disk encryption https://github.com/flatcar/flatcar-website/pull/317 What we can do with GRUB is not as nice as what is possible with systemd-boot, thus some limitations exist. But...

Thanks for the info, I don't have the hardware to test it

About migration to etcd3: We might keep etcd2 support around in locksmith for some time besides FleetLock, or we could directly delete it and make FleetLock the new default together...

Thanks for the workaround, indeed it helps :) But now I wonder, what are valid contents for a `.membership` file - is the content ignored? After a quick glimpse on...

@AdrianVovk fyi

I think what Cincinnati has is also interesting, it was something like a number that defines the order for clients to update by having them wait longer. I think it...

> That's the recommendation we generally give users. This, and that one can also run an own Nebraska server if fine grained control is needed.

Semi-related note: In case we ever use soft-reboot, Luca Boccassi mentioned that `CONFIG_IMA_WRITE_POLICY` should be disabled because it appends the policy over and over again until the system is quite...

You need to port the assembly instructions to match the CPU frequency, see https://github.com/pothos/arduino-n64-controller-library/issues/4#issuecomment-650650987