TPM-backed Full Disk Encryption is coming to Ubuntu | Ubuntu
ubuntu.com
Discover Ubuntu’s latest security enhancement: TPM-backed Full Disk Encryption (FDE). This experimental feature in Ubuntu 23.10 offers improved data protection without the need for passphrases […]

Absolute joke. Emphasis is mine:

… protected by a TPM and recovered automatically only by early boot software that is authorised to access the data

later on in the article it talks about how the packages are now going to be supplied:

Namely, the bootloader (shim and GRUB) and kernel assets will be delivered as snap packages (via gadget and kernel snaps), as opposed to being delivered as Debian packages. As such, it is the Snapd agent which will be responsible for managing full disk encryption throughout its lifecycle.

Looks like snap will be the future for Ubuntu

  • notfromhere@lemmy.oneEnglish
    2·
    1 year ago

    Right. Typing in the LUKS password every time you resume from standby (specifically hibernation) means nobody actually uses it in practice. This unlocks a key feature missing from Linux ecosystem.