Google Posts Updated Encrypted Hibernation Patches For Linux

[anarki2]

Fix unencrypted hibernation first lol.

[pal666]

Am i the only one starting trust google not more than microsoft ?

of course not, there's a lot of stupid people

[tildearrow]

Am i the only one starting trust google not more than microsoft ?

Nope, don't worry. I always believed Google was a monster bigger than Microsoft.

Doesn't mean Google's contributions to open-source are bad though...

[jorgepl]

Google: Does good thing
Everyone: Remember all the evil things Google does? Aren't they awful?

It's so stupid. This is good for Linux. Their hatred for Google blinds them from the good they may be doing (even though they do bad stuff too).

[Vistaus]

Are you sure Secureboot is enabled?

From the kernel_lockdown manpage (and my experience) it's not possible:



Edit: Maybe you (or the distribution is) are doing something special, but this is not working OOTB

It's enabled. Could be a distribution thing, but it's the same on Deepin, Void, Arch and openSUSE, so I highly doubt that. I'm not doing anything to make it work.

[Bigon]

Suspend to disk works fine for me with SecureBoot on, both on this mini PC as well as my previous PC, which was a laptop even.

Are you sure Secureboot is enabled?

From the kernel_lockdown manpage (and my experience) it's not possible:

[...]
On an EFI-enabled x86 or arm64 machine, lockdown will be
automatically enabled if the system boots in EFI Secure Boot
mode.[...]

• Unencrypted hibernation/suspend to swap are disallowed as the
kernel image is saved to a medium that can then be accessed.
[...]

Edit: Maybe you (or the distribution is) are doing something special, but this is not working OOTB

[ll1025]

Am i the only one starting trust google not more than microsoft ?

Google: Does good thing
Everyone: Remember all the evil things Google does? Aren't they awful?

[archkde]

Am i the only one starting trust google not more than microsoft ?

Google has been worse than Microsoft for quite some time now. And the frightening thing is that while Microsoft is still improving somewhat, Google keeps getting worse.

[Vistaus]

Suspend to disk (hibernation) is disabled when you have SecureBoot. You only have suspend to RAM in that case.

Suspend to disk works fine for me with SecureBoot on, both on this mini PC as well as my previous PC, which was a laptop even.

[kylew77]

I wonder if ChromeOS has any backdoors in its encrypted home implementation. I have a Chromebook but I don't know how much I trust its disk encryption compared to Linux or *BSD FDE. ChromeOS encryption feels somewhat like encryption in Windows.