this post was submitted on 16 Jan 2025
171 points (98.3% liked)

Linux

49738 readers
679 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I was recently intrigued to learn that only half of the respondents to a survey said that they used disk encryption. Android, iOS, macOS, and Windows have been increasingly using encryption by default. On the other hand, while most Linux installers I've encountered include the option to encrypt, it is not selected by default.

Whether it's a test bench, beater laptop, NAS, or daily driver, I encrypt for peace of mind. Whatever I end up doing on my machines, I can be pretty confident my data won't end up in the wrong hands if the drive is stolen or lost and can be erased by simply overwriting the LUKS header. Recovering from an unbootable state or copying files out from an encrypted boot drive only takes a couple more commands compared to an unencrypted setup.

But that's just me and I'm curious to hear what other reasons to encrypt or not to encrypt are out there.

(page 5) 38 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 3 weeks ago

I always encrypt my computer SSD as well as my external backup drive. I just wish that when installing a Linux distro and when selecting encryption that it would work with multiple drives

[–] [email protected] 1 points 3 weeks ago

I made the mistake of not setting up encryption on my main 45TB zfs pool so I'm currently backing up everything on there to tape so I can recreate the pool (also need to change from mirrored to raidz) and then copying everything back to the drives. Although writing and reading each are around 6 days continuesly. Didn't want to bite the bullet and pay more then I absolutely had to and only got a LTO-4 drive and tapes.

[–] [email protected] 1 points 3 weeks ago

All my important files are on a NAS, so if someone steals my laptop, there's nothing of value there without being able to log in and mount the remote file systems

[–] [email protected] 1 points 3 weeks ago (1 children)

Yes. Encrypting your entire hard drive has basically been a tickbox in the Fedora installer for a long time now. No reason why I wouldn't do it. It's, easy, doesn't give me any problems and improves my devices security with defence-in-depth. No brainer.

load more comments (1 replies)
[–] [email protected] 1 points 3 weeks ago (5 children)

are you guys using the bios ssd encryption option or a software solution?

load more comments (5 replies)
[–] [email protected] 1 points 3 weeks ago (2 children)

Only encrypt the home partition, for the root partition it just unnecessarily slows down the system.

Also, I think, there could be different approaches instead of encryption. AFAIK, android doesn't use encryption underneath, but uses a semi-closed bootloader (which means, if you install a different OS, all user data gets wiped). I'm currently investigating the feasibility of such an approach in the long term.

load more comments (2 replies)
[–] [email protected] 0 points 3 weeks ago (2 children)

I do not as I do not have any sensitive data and what data is sensitive are the digital documents which are securely encrypted by default via id card and its passwords.

If I start having something worth protecting I will turn on fedoras encryption. But until then anyone who manages to steal my 100 eur thinkpad and guess its password is welcome to try out linux and see if they like it I guess.

load more comments (2 replies)
[–] [email protected] -1 points 3 weeks ago* (last edited 3 weeks ago) (2 children)

I was recently intrigued to learn that only half of the respondents to a survey said that they used NO disk encryption.

Is the other half alright?

load more comments (2 replies)
[–] [email protected] -1 points 3 weeks ago (1 children)

Because it requires generating, memorizing and entering a secure password. Because Linux typically doesn't support fingerprint readers or other biometrics.

[–] [email protected] 1 points 3 weeks ago (1 children)

You can just store the key in your TPM and then you don't have to memorize anything.

[–] [email protected] 1 points 3 weeks ago

Is that near the TPS reports?

[–] [email protected] -1 points 3 weeks ago* (last edited 3 weeks ago) (4 children)

No. I prefer the quickest way to share my data between different computers and operating systems on my home network. I will also mention that my network is not accessible over the internet.

load more comments (4 replies)
load more comments
view more: ‹ prev next ›