3 ms·

Version 252 of systemd, as expected, locks down the Linux boot process

• theandrewbailey 4y ago
  > The enhanced TPM2 support will enable linking a drive's encryption keys to the keys held in compatible firmware so that an encrypted disk can be unlocked automatically during boot – but can't be unlocked by other distros. The result will be improved security for users, especially corporate users, but we foresee this hindering data-recovery efforts. That sounds like a pretty awesome feature, as long as drives can be manually unlocked. If not, better have usable backups! (you have backups AND test them, right?)
  • db48x 4y ago
    For home users it is probably a little much, but it'll be useful in a lot of places. Any time you use disk encryption then enrolling a backup key that can be used to decrypt the filesystem if needed is definitely recommended.