The XFA Desktop Application now runs on NixOS. Install it with the same command as on every other Linux: it goes into your own nix profile, without root permissions, and XFA keeps itself up to date. Admins who manage NixOS centrally can add XFA to the system configuration instead. See how to install XFA on NixOS
XFA's Linux disk-encryption check now recognises TCG OPAL self-encrypting drives* alongside LUKS.
When drive locking is enabled on an OPAL-capable drive, the device counts as encrypted, giving administrators accurate compliance reporting for Linux devices that rely on hardware encryption.
Review your disk-encryption policy
*Detection covers TCG OPAL 1.x and 2.x drives reported bysedutil-cli. Non-OPAL SED variants (TCG Pyrite, Ruby, and Enterprise SSC) and OPAL drives whose locking has not been activated are not recognised as encrypted.XFA's Linux integrity protection check now recognises AppArmor as a valid mandatory-access-control system, alongside SELinux.
Linux users who rely on AppArmor as their kernel-level integrity protection now pass the check automatically.