Google Posts Updated Encrypted Hibernation Patches For Linux

[Bigon]

Suspend to disk works fine for me with SecureBoot on, both on this mini PC as well as my previous PC, which was a laptop even.

Are you sure Secureboot is enabled?

From the kernel_lockdown manpage (and my experience) it's not possible:

[...]
On an EFI-enabled x86 or arm64 machine, lockdown will be
automatically enabled if the system boots in EFI Secure Boot
mode.[...]

• Unencrypted hibernation/suspend to swap are disallowed as the
kernel image is saved to a medium that can then be accessed.
[...]

Edit: Maybe you (or the distribution is) are doing something special, but this is not working OOTB

[Vistaus]

Are you sure Secureboot is enabled?

From the kernel_lockdown manpage (and my experience) it's not possible:



Edit: Maybe you (or the distribution is) are doing something special, but this is not working OOTB

It's enabled. Could be a distribution thing, but it's the same on Deepin, Void, Arch and openSUSE, so I highly doubt that. I'm not doing anything to make it work.

[jorgepl]

Google: Does good thing
Everyone: Remember all the evil things Google does? Aren't they awful?

It's so stupid. This is good for Linux. Their hatred for Google blinds them from the good they may be doing (even though they do bad stuff too).

[tildearrow]

Am i the only one starting trust google not more than microsoft ?

Nope, don't worry. I always believed Google was a monster bigger than Microsoft.

Doesn't mean Google's contributions to open-source are bad though...

[pal666]

Am i the only one starting trust google not more than microsoft ?

of course not, there's a lot of stupid people

[anarki2]

Fix unencrypted hibernation first lol.