parke

Thank you for the detailed explanation of the firmware update process. IMO: If installing the `udev` rules is optional (and I definitely prefer it to be optional), then Chrysalis should...

> > 1. Insert an additional test reboot at the beginning solely to verify that Chrysalis will have write access to the keyboard after it reboots. > > We _might_...

> > If B is not A, then B will not be in bootloader mode, so no damage should be done. > > But if A was in bootloader mode...

> Musl's [`getlogin`](https://git.musl-libc.org/cgit/musl/tree/src/unistd/getlogin.c?h=v1.2.2) returns `getenv("LOGNAME")`. Dropping privileges should work if `LOGNAME` is set appropriately, e.g. > > ``` > $ whoami > alpine > $ sudo boringtun wg0 > BoringTun...

Fwiw, the idea of adding granular permission for snapshot destruction was mentioned in @allanjude's talk at the [OpenZFS Developer Summit 2022](https://openzfs.org/wiki/OpenZFS_Developer_Summit_2022). * Talk summary: [Enabling Storage Multi-Tenancy With ZFS For...

Fyi, it appears this issue may be related to #9958.