Brave New Trusted Boot World

Re:Brave New Trusted Boot World by RetpolineDrama on Wednesday October 26, 2022 @01:01PM (#33346481)

Well I remember getting completely stuck at one part and the cause was my samsung SSD's funny behavior in the "locked" state.

I had to set some kind of kernel flag or something (sorry, it's been years) to get it to ignore the drive until I unlocked it, as there was some kind of tight-loop where it would just keep trying to connect infinitely and not progress/fail/timeout.

I've been meaning to get back into linux again but it's going to be on a pristine/new machine.

[ Parent | on HN ]

Re:Brave New Trusted Boot World by rollcat on Wednesday October 26, 2022 @03:49PM (#33348463)

You're definitely overcomplicating it. Security that's too hard to make use of isn't really accomplishing anything.

[ Parent | on HN ]

Re:Brave New Trusted Boot World by RetpolineDrama on Wednesday October 26, 2022 @04:25PM (#33348915)

Well the work is in setting it up. Once it's working you just enter a password. I'm sure hardware FDE support in linux has come a long way since I last tried.

[ Parent | on HN ]

Re:Brave New Trusted Boot World by ziml77 on Wednesday October 26, 2022 @04:39PM (#33349096)

There shouldn't be that level of work required to set it up. The tools are lacking if it's not just a couple of commands or toggles to get a fully encrypted disk with a secure boot chain.

[ Parent | on HN ]