security-misc/usr/lib/dracut/modules.d/40sdmem-security-misc/README.md

### Make sure sdmem and dmsetup is part of the initramfs

sudo apt update

sudo apt --no-install-recommends install secure-delete dmsetup

sudo dracut --include /usr/bin/sdmem /bin/sdmem --force
minor 2022-06-29 09:38:18 -04:00			`### Make sure sdmem and dmsetup is part of the initramfs`

			`sudo apt update`

			`sudo apt --no-install-recommends install secure-delete dmsetup`
- Wipe LUKS Disk Encryption Key for Root Disk from RAM during Shutdown to defeat Cold Boot Attacks - Confirm in console output if encrypted mounts (root disk) is unmounted. (Because that is a pre-condition for wiping the LUKS full disk encryption key from RAM.) Thanks to @friedy10! https://github.com/friedy10/dracut/tree/master/modules.d/40sdmem https://forums.whonix.org/t/is-ram-wipe-possible-inside-whonix-cold-boot-attack-defense/5596 2022-06-29 09:32:55 -04:00
			`sudo dracut --include /usr/bin/sdmem /bin/sdmem --force`