Description
Network-bound encryption deployments can advertise Tang keys for Clevis-based unlocking from a current git build. It installs Tang server binaries through Meson plus sysusers, tmpfiles, and /var/db/tang; key rotation, firewall exposure, availability, and boot-time unlock policy need administrator care.