Hacker News Reader

How does booting for remote login in such a setup work though? You'd have to be physically present in order to enter the passphrase.

For that I do an ssh shim at initram (with portknocking) for key entry preboot

I would love to read a tutorial on that if you know of one.