1. You have to create a separate volume just to install a package manager, which is a poor user experience
2. A separate volume means FileVault won't work out of the box
3. The volume can be mounted only after GUI apps are brought up
4. Restoring after sleep might fail because of 3
All of these are mentioned in the Github issue, but it might be hard to find because it requires so many clicks and scrolling to view the whole thread.
I believe Nix actually picks a volume so that it can be encrypted, and it uses one of the many ways to run a script before login (some of which still happen to work) to decrypt it?
I read that thread a couple weeks back (was doing some firmlink research and stumbled upon it) and I seem to recall someone there finding something that ran pretty early. Perhaps I'm misremembering? I am sure there is at least one way to get this done, but I'll have to go look into what it is.
1. You have to create a separate volume just to install a package manager, which is a poor user experience
2. A separate volume means FileVault won't work out of the box
3. The volume can be mounted only after GUI apps are brought up
4. Restoring after sleep might fail because of 3
All of these are mentioned in the Github issue, but it might be hard to find because it requires so many clicks and scrolling to view the whole thread.