3 ms·

I'm in the same position with Linux. I'm back on Windows as a daily driver for the first time in about 12 years. WSL2 makes this more pleasant than I expected.

I'm in the same position with Linux. I'm back on Windows as a daily driver for the first time in about 12 years. WSL2 makes this more pleasant than I expected. There are a few reasons for this. The first is hardware support; I bought a ThinkPad T14 Gen 5 AMD, which is almost a perfect Linux machine save for a whole bunch of bugs in the amdgpu driver that I'm not willing to live with. This is always a risk when you buy recent hardware. The second is that no mainstream Linux distribution does secure boot or disk encryption very well, and that's not something I can do without on a portable machine in this day and age. Fedora is moving in the right direction quickly with UKI[1] and SED[2] support, but it's not there yet. [1] https://fedoraproject.org/wiki/Changes/Unified_Kernel_Support_Phase_2 https://fedoraproject.org/wiki/Changes/Unified_Kernel_Suppor... [2] https://discussion.fedoraproject.org/t/f41-change-proposal-self-encrypting-drives-support-in-the-installer-self-contained/125529 https://discussion.fedoraproject.org/t/f41-change-proposal-s...

nolist_policy 2y ago
Same, but I went with a well specced Chromebook and it's Linux dev VM.
- bigfatkitten 2y ago
  I like Chrome OS, but the hardware options at the high end are very limited (and outrageously priced.) There is Chrome OS Flex, but then I don't get Android which for me also means no VPN outside Crostini.
exe34 2y ago
I use nixos and use luks, I'm pretty sure it's available on other distros?
- bigfatkitten 2y ago
  The problem other distros have is they provide no protection for initrd, which mostly makes LUKS a waste of time; if you can compromise initrd, you own the OS. I hadn't really looked into NixOS but I like where Lanzaboote is headed. https://github.com/nix-community/lanzaboote https://github.com/nix-community/lanzaboote
  - exe34 2y ago
    https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-c... "we have been working on bringing TPM-backed full disk encryption to classic Ubuntu Desktop systems as well, starting with Ubuntu 23.10 (Mantic Minotaur)"

nolist_policy 2y ago

Same, but I went with a well specced Chromebook and it's Linux dev VM.

bigfatkitten 2y ago
I like Chrome OS, but the hardware options at the high end are very limited (and outrageously priced.) There is Chrome OS Flex, but then I don't get Android which for me also means no VPN outside Crostini.

exe34 2y ago

I use nixos and use luks, I'm pretty sure it's available on other distros?

bigfatkitten 2y ago
The problem other distros have is they provide no protection for initrd, which mostly makes LUKS a waste of time; if you can compromise initrd, you own the OS. I hadn't really looked into NixOS but I like where Lanzaboote is headed. https://github.com/nix-community/lanzaboote https://github.com/nix-community/lanzaboote
- exe34 2y ago
  https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-c... "we have been working on bringing TPM-backed full disk encryption to classic Ubuntu Desktop systems as well, starting with Ubuntu 23.10 (Mantic Minotaur)"