this post was submitted on 10 Apr 2024
203 points (93.6% liked)

Linux

47232 readers
804 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 20 points 5 months ago (3 children)

Yeah it's alright. I've been using Tumbleweed on my Desktop PC for the last few months and I gotta say it's mid. They do hard drive unlocking in Grub instead of in the initfs which means that only LUKS 1 and with that only the not-so-secure PDKDF is supported, instead of argon2id which is the modern KDF you want to use. This is a small and annoying oversight in the distros security which is why I will not be using it in the future

[–] [email protected] 6 points 5 months ago (1 children)

Doesn't GRUB support LUKS2 nowadays? I know that wasn't the case a year ago or so, but I didn't see a notice on the Archwiki last time I checked.

[–] [email protected] 4 points 5 months ago

Not sure how up to date this is, but it claims LUKS2 is only partially supported by GRUB https://docs.voidlinux.org/installation/guides/fde.html

LUKS2 is only partially supported by GRUB; specifically, only the PBKDF2 key derivation function is implemented, which is not the default KDF used with LUKS2, that being Argon2i (GRUB Bug 59409). LUKS encrypted partitions using Argon2i (as well as the other KDF) can not be decrypted. For that reason, this guide only recommends LUKS1 be used.

[–] [email protected] 2 points 5 months ago

You can fix this by manually placing the /boot partition outside of luks when you do your install. I did it and now my opensuse system boots in a reasonable time. Annoying to do but 100% worth it.

[–] [email protected] 1 points 5 months ago

Luckily most installers support installing wherever you tell them to. So if you install from a live image you should be able to set it up the way you want. I'll definitely try that as soon as a I do my next installation.