6 ms·
It's easy enough when things are on separate disks. Disk partitioning for dual-boot always was and always will be crap.
by xaduha 6y ago
It's easy enough when things are on separate disks. Disk partitioning for dual-boot always was and always will be crap.
- jnwatson 6y agoI've done it for so long and have never had an issue. Every once in a while Windows overwrite the boot sector and you have to stick in a rescue stick. Not a huge problem.
- MikusR 6y agoWith uefi that seems to not be a problem.
- rand0mx1 6y agoI used to dual boot windows xp and windows 98 on same hdd, never faced any problem. However, Linux and Windows always conflict if dual boot is on same hdd.
- tamrix 6y agoThat is until you use TPM to decrypt your windows partition automatically. If you boot the Linux boot manager on another drive, Windows won't decrypt its drive automatically. So you have to boot the Windows boot manger. At which point is easier to just select your boot drive on Startup. You can however use other tools to encrypt/decrypt the windows drive besides bit locker and it will work. TPM2 to decrypt your Linux drive on boot is a bit of a pain too.
- usr1106 6y agoWhat's the point of using a TPM to decrypt your disk automatically? You use disk encryption to be protected against the case that the computer gets stolen. But that means the attacker has your TPM and can use it. The only way to prevent that is requiring a BIOS password at boot (not very common) and secure boot (and like in the article many Linux users skip that because it can require extra knowledge and extra work.) So you replaced entering a disk password by entering a BIOS password. What's the benefit from usability perspective? (Yes, secure boot would add security I don't try to deny that.)
- gruez 6y agoYou still need a password, but you you don't have to choose/enter a separate password for your disk encryption. With TPM, your computer decrypts and boots up to your OS, where a thief would have to enter in your OS password. They can't bypass it by patching the OS files or cracking the hash stored on disk, because the disk is encrypted. They also can't bypass it with a patched kernel/bootloader, because that would change the PCRs, causing the TPM to no longer auto-unlock.
- AshamedCaptain 6y agoAs I understand it, the idea is that even without a BIOS password nor a disk encryption password, your OS can boot and only then request a session password. So effectively you only have to enter one password, rather than 2 or 3. Even if the laptop is stolen, TPM included, you still have to guess the login password. This is how Bitlocker et all operate and to be honest makes a lot of sense for a regular user (and practically everyone unless your enemy is a government-like entity than can decap/sniff TPM chips...). Secure Boot actually does not help much here... since the idea is that thief wouldn't be able to change the disk contents.
- Tsiklon 6y agoInteresting - LUKS and Apple's Filevault take the opposite approach; wherein you must provide a password from an authorised user in order to access the contents of a filesystem/logical volume. Meaning that without authorisation your data is still encrypted. I'm not completely familiar with Windows service management and how it handles logins - but doesn't the TPM auto decrypt function of Bitlocker mean that if you have a compromised system which has a dodgy service that starts at boot time it can potentially exfiltrate data from the machine without a user logging in? Of course, if this is the scenario you're experiencing you have much bigger problems already haha.
- SturgeonsLaw 6y ago> What's the point of using a TPM to decrypt your disk automatically? It's moving the slider towards the "ease of use" end of the "security - ease of use" spectrum. It essentially outsources security to the Windows OS logon, at which point a whole bunch has started up in the background and the attack surface has substantially increased. But it saves having to type in a second password.
- dymax78 6y agoOnly time I've faced an issue was if Linux was installed first, Windows would modify the existing boot partition. But for simplicity and to ensure isolation, I use separate drives as well.