{"version": 2, "width": 110, "height": 30}
[0.258, "o", "\r\n\u001b[1;36m  zfsify  \u26a1  Ubuntu \u2192 ZFS\u001b[0m\r\n\r\n  \u001b[1;36m[1. Scan disk + choose method]\u001b[0m | 2. Prepare disk | 3. Convert ext4 to ZFS | 4. Finish disk + boot setup\r\n  5. Snapshots + recovery + growth\r\n\r\nEncrypt the new ZFS root filesystem?\r\n\r\n  1) No encryption [default]\r\n  2) Encrypt / and /boot; enter a passphrase in RAM rescue\r\n     Each subsequent boot requires unlocking in the preboot console.\r\n  3) Encrypt with a TEMPORARY local key (automatic boot)\r\n     Generate 16 characters; save and retype before proceeding.\r\n  q) Cancel\r\nEnter = 1; waiting for your selection (no timeout): "]
[2.262, "o", "3\r\n\u001b[1;31m\r\n!!! PLAINTEXT BOOT KEY: THIS DEFEATS DISK ENCRYPTION !!!\r\nAnyone with the boot disk or its snapshots can decrypt this server.\r\nTemporary bootstrap only. Later remove this file and change the passphrase.\r\nThat is fast, but DOES NOT revoke old disk copies or an exposed data key.\r\nFor forensic protection, rewrite under a fresh encryption root and\r\nretire old copies. Passphrase rotation alone cannot provide that.\r\nThen use a person or remote key source at boot.\r\nhttps://pirate.github.io/zfsify/docs/encryption#temporary-plaintext-boot-key\r\n\u001b[0m\r\nTemporary key: 32um3VFjg29s8a9R\r\nSave this key in your password manager or write it down.\r\nRetype the saved key to continue (no timeout): "]
[4.265, "o", "\r\nEncryption: AES-256-GCM for / and /boot.\r\nThe bootloader remains unencrypted. Old ext4 remnants and external backups are not erased/encrypted.\r\n"]
[4.266, "o", "Temporary key saved for rescue and automatic boot. Replace it after bootstrap.\r\n"]
[4.27, "o", "Connection to 127.0.0.1 closed.\r\r\n"]