<p><span class="h-card" translate="no"><a href="https://y.diskcat.com/@snep" class="u-url mention">@<span>snep</span></a></span> <span class="h-card" translate="no"><a href="https://cloudisland.nz/@xssfox" class="u-url mention">@<span>xssfox</span></a></span> yeah that's the kind of setup i've seen (if they even used DHCP at all), and yeah it's fragile and cumbersome and no authorization is possible. the cryptoroot is different in that you can't do it at all without initrd unless you bake all your crypto into the kernel which seems... icky</p>