From f21fc07c23b44a072916ab3e0f7d56d62680cdc6 Mon Sep 17 00:00:00 2001 From: Vuong Hoang Date: Fri, 16 Oct 2026 09:22:22 -0700 Subject: [PATCH] docs(albok-service): sealed unlock takes ~25 s; the argon2 memory warning is benign --- stacks/albok-service/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/stacks/albok-service/README.md b/stacks/albok-service/README.md index 650f8c4..0c7ed92 100644 --- a/stacks/albok-service/README.md +++ b/stacks/albok-service/README.md @@ -209,6 +209,8 @@ and what goes in it is Prime's call. albok-dev provisioned it on Prime's goal "l ```bash # UNLOCK (after a VM reboot the wing comes up LOCKED, by design: no crypttab). No service restart is needed. +# The open takes ~25 s (argon2id keyslot: 215 MiB, time cost 55) and may print "keyslot operation could fail as it +# requires more than available memory": benign, cryptsetup compares against MemFree, not MemAvailable (2026-10-16 harness). secret get albok/wing-key-personal-sealed | tr -d '\n' | ssh infra-ops@10.100.50.44 \ 'sudo -n cryptsetup open --type luks2 --key-file=- /srv/albok/luks/personal.sealed.img albok-personal-sealed \ && sudo -n mount /dev/mapper/albok-personal-sealed /srv/albok/sealed/personal.sealed'