Description
Encrypted boot setups can use an initcpio hook that supports a remote LUKS header instead of only a local header.
It is useful for advanced disk-encryption designs where header location is part of the threat model. Boot encryption hooks can make a system unbootable if networking, storage paths, or recovery keys are wrong, so test recovery before relying on it.