> "It's been a long time desire of mine to have a secure Linux laptop without needing to enter my password twice during startup" Only with regards to that sent

> "It's been a long time desire of mine to have a secure Linux laptop without needing to enter my password twice during startup" Only with regards to that sentence (as I don't know much about TPM): You can simply opt for full disk encryption during install, and then you can also select "automatically log me in on boot" (not exact wording) when creating your user. So you enter the encryption password and that's it. Not sure why you would _need_ to enter password twice with encryption? That's how I handle it. Screen lock, or returning from suspend still prompts for user password as usual.