this post was submitted on 03 Dec 2023
1005 points (87.5% liked)
linuxmemes
24840 readers
619 users here now
Hint: :q!
Sister communities:
Community rules (click to expand)
1. Follow the site-wide rules
- Instance-wide TOS: https://legal.lemmy.world/tos/
- Lemmy code of conduct: https://join-lemmy.org/docs/code_of_conduct.html
2. Be civil
3. Post Linux-related content
sudo
in Windows.4. No recent reposts
5. π¬π§ Language/ΡΠ·ΡΠΊ/Sprache
6. (NEW!) Regarding public figures
We all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.Please report posts and comments that break these rules!
Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
My arch install took some setup to get it specifically right for me, still trying to figure out the final touches. I have the entire thing encrypted and under btrfs sub-partitions. I set up secure boot as well and added it to my tpm. Last thing I got to do is set it up so it automatically decrypts on boot without a password. I've been liking this setup over my Fedora setup. I have to worry about smaller breakage every so often, but with Fedora I had to worry about big breakage every major version. Moving most of what I can to flatpak mitigated a lot of that though. I'm too lazy to replicate my arch setup on my laptop so that's just sticking with Fedora until I decide it should run something else.
Sorry if this is a stupid question, and maybe it's because I'm not understanding exactly what you're saying, but what's the benefit of encrypting if it decrypts on boot without a password?
Just to prevent someone who boots another OS on your device from being able to access your files? Something else?
Because changing any hardware will flip the tpm and require a password. If they stole the hard drive, it'd be encrypted. Basically I'm protecting on if they rip out the harddrive lol.