3 ms·
The problem other distros have is they provide no protection for initrd, which mostly makes LUKS a waste of time; if you can compromise initrd, you own the OS.
by bigfatkitten 2y ago
The problem other distros have is they provide no protection for initrd, which mostly makes LUKS a waste of time; if you can compromise initrd, you own the OS.
I hadn't really looked into NixOS but I like where Lanzaboote is headed.
https://github.com/nix-community/lanzaboote https://github.com/nix-community/lanzaboote
- exe34 2y agohttps://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-c... "we have been working on bringing TPM-backed full disk encryption to classic Ubuntu Desktop systems as well, starting with Ubuntu 23.10 (Mantic Minotaur)"