Ehmmmm I still don’t grasp what you mean.

In any case, mandos has a possibility to do it automatically via rsa encryption, so you have the possibility of totally unattended restart.

Because the server is (ideally) in a different location, if one of yiur systems is stolen / compromised then you only delete / revoked the certificates ID and then that machine would not be able to decrypt its own luks system.

I never deployed this system on my own, but I know a few guys who did it

Regards

I am afraid I don’t get the question.

What do you exactly mean?

Chech here, I think is a more sensible way of doing things https://www.recompile.se/mandos

You are partially right, I was fast and sloppy and I gave the impression all is jitted and it is not the reality.

The part of the translation is fine. However there are parts that are compiled beforehand (shaders for example and I can recall something about arm or other architectures, not sure now). And this is a crucial point of the extra performance, because some parts can be ported to more updated/efficient implementations, not because there are less services in the background.

As far as I know for the new Vulkans layers and dx12 implementation there is a “translation layer” from the old dx implementation to the most updated one. This is the main reason why old games runs faster on Proton than in w7 for the same hw. Even if they were designed for w7 specifically.

Last time I checked this was done during the booting of the game, but i have to admit this was time ago and it could have been changed.

Ummmm sure?

I don’t want to start that extremely old flame war of native VS jit code but…

Proton is not an emulation, it is a translation to native code, and while it has some drawbacks (more memory usage, more time at start up to compile things) it can unlocks a lot of potential when the hw support new capabilities, this is the reason that some dx10 games run faster on Linux…