These last weeks I'm finally settling in my garage network setup, the place where my nomad cluster lives. An old laptop is part of that setup too, docked, always on, running some long lived stuff. With full disk encryption, which means every reboot, planned or not, stops at a passphrase prompt until somebody walks over and types it.

What I wanted was quite simple; when the laptop boots inside my home network it unlocks itself, anywhere else it asks for the passphrase like it always did. That is exactly what network bound disk encryption does, with tang on the server …