TPM2-measured boot with bus protection is pretty nice actually for Linux installations where secure boot is not enabled, like the default Arch Linux installation for instance.

For the sake of "defence in depth", I'd enable both if it is out-of-the-box feature but would not probably bother with secure boot if it requires extra work.

So, the takeaway from this is that it would make a lot of sense to make measured boot happen in arch-install installation as opt-in feature. No Microsoft key required.

Still so far the most informative overview for the shenanigans is https://microos.opensuse.org/blog/2023-12-20-sdboot-fde/ but I'd also look for more recent references.

Policy hash calculation per kernel package update for LUKS2 is what needs to happen over time whenever a new kernel package is installed with hooks/scripts.

So the thing that was hyped to DRM the world into a locked down hellhole rendered out the Microsoft key hard binding instead 🤷

#tpm #linux #archlinux #opensuse #secureboot #security

Systemd-boot and Full Disk Encryption with TPM and FIDO2

Systemd-boot and Full Disk Encryption in Tumbleweed and MicroOS

^{openSUSE MicroOS}

After a great week for Linux, with the releases of Fedora 40 and today Ubuntu 24.04, I would be interested to know which operating system the Fediverse in my "bubble" uses? Linux? Windows? Or macOS or even a BSD? More than one?

Please write in the comments which distribution or version! Thanks for participating and SHARING!

#linux #unix #opensource #freesoftware #windows #microsoft #apple #macos #bsd #freebsd #openbsd #netbsd #debian #fedora #ubuntu #linuxmint #archlinux #opensuse #gnome #kde

• Linux - Which one? (71%, 50 votes)
• Windows 10/11 (15%, 11 votes)
• macOS (20%, 14 votes)
• FreeBSD/NetBSD/OpenBSD (30%, 21 votes)

I am working on a GTK/#Relm4 password manager already 😎
But it is a client for #BitWarden/#VaultWarden only.
You want to build a local one?

#GTK #Rust #rustlang #GNOME #Linux #Ubuntu #Linux #Fedora #OpenSUSE #Debian

Are you experienced with GTK and Rust ? ❤️

We are looking to contract someone to work on the new GNOME Password Manager 🔑

We want it to become a core/default app and help secure millions of users.

You'll be working with the GNOME Foundation, a non-profit dedicated to building emancipatory technologies for everyone.

Please send resume / portfolio to stf@gnome.org

Boosts welcome

#GTK #Rust #rustlang #GNOME #Linux #Ubuntu #Linux #Fedora #OpenSUSE #Debian

The #GNOME 46 desktop environment already landed in #ArchLinux and #openSUSE Tumbleweed 👏👏👏

@gnome #Linux #OpenSource

We are siblings in RPM. Our communities have so much overlap. You are awesome and everyone needs to know!

To: @opensuse
From: Fedora

#ILoveFS #openSUSE #FedoraLoveFS

I think I've finally figured out why I love #openSUSE Tumbleweed so much. It's simply due to it being stable AND a rolling release. It feels just great to use.

Also, as someone who loves GUIs, YaST is just a dream come true. I've tried lots of other distros, but rarely have I come back to one time and time again. #Linux