2 ms·

> If you have a UEFI PC with a TPM 2 chip, you can opt for the new self-unlocking full-disk encryption system – albeit with some restrictions. This needs a snap

> If you have a UEFI PC with a TPM 2 chip, you can opt for the new self-unlocking full-disk encryption system – albeit with some restrictions. This needs a snap-packaged kernel, and that doesn't include as many driver modules, so for example it can't handle NVMe RAID. Maybe other distros can work around those limitations. Not many people outside Ubuntu want snaps.

lproven 3y ago
[Author/submitter here] > Maybe other distros can work around those limitations. I am afraid that you have this rather backwards. This is closer to Canonical playing catch-up. The first such project came out from Lennart Poettering of systemd fame: https://0pointer.net/blog/brave-new-trusted-boot-world.html https://0pointer.net/blog/brave-new-trusted-boot-world.html Which I wrote about here: https://www.theregister.com/2022/10/26/tightening_linux_boot_process_microsoft_poettering/ https://www.theregister.com/2022/10/26/tightening_linux_boot... And which started shipping in systemd 253, which I wrote about here: https://www.theregister.com/2023/02/17/systemd_253/ https://www.theregister.com/2023/02/17/systemd_253/ SUSE has its own version as well. https://www.theregister.com/2022/10/05/suse_alp_v001/ https://www.theregister.com/2022/10/05/suse_alp_v001/ It may be that UKI is an attempt to leapfrog SUSE ALP.