3 ms·
I believe that the disk encryption twice thing is to prevent the so called "evil maid" attack. Where both the boot partition, and the file system are separately
by COGlory 3y ago
I believe that the disk encryption twice thing is to prevent the so called "evil maid" attack. Where both the boot partition, and the file system are separately encrypted. Frustratingly, the encryption in GRUB2 is painfully slow, so I normally disable that. You can do this by creating the boot partition separately from the root file system, and only encryption the OS filesystem. The downside is that if someone steals your drive, or clones it, they can hammer away at the encrypted filesystem. Not really in my threat model, so I normally go with unencrypted boot + encrypted filesystem. The kernel decryption is much faster as well.
Details here in case I have some of that wrong:
https://en.opensuse.org/SDB:Encrypted_root_file_system#Avoiding_to_type_the_passphrase_twice https://en.opensuse.org/SDB:Encrypted_root_file_system#Avoid...
- evilmaidmyass 3y agoI did install OpenSUSE and immediately removed it after I encountered the same problem. It's not normal to have to enter the exact same password twice. I don't care if it's about the "evil maid" attack or whatever. Linux developers would have us open our fridges by first flipping them upside down and explain with a straight face it's perfectly normal and is meant to address <this or that issue>.
- COGlory 3y ago>I did install OpenSUSE and immediately removed it after I encountered the same problem. If you uninstalled it immediately because you don't like the defaults, I suspect Linux might be an operating system you wish to avoid entirely.
- RealStickman_ 3y agoIt's possbile to setup a keyfile in your boot partition to decrypt your root partition so you only have to enter a password once. But this really shouldn't be necessary.