• Skull giver@popplesburger.hilciferous.nl
    link
    fedilink
    arrow-up
    3
    ·
    11 months ago

    Most Linux installers let you set up a LUKS root partition these days, though the option is off by default. I think Ubuntu doesn’t even use an unencrypted /boot in the latest version.

    Admittedly, setting up encryption manually is kind of a pain (two or three layers of partitions, then updating the UUIDs in fstab, adding an entry in crypttab, recreating initramfs and the bootloader config) but you don’t need to do that on most fresh installs.

    What Linux lacks is an easy way to switch to using encryption. In Windows you can just enable and disable encryption post install. In Linux, you’ll need to repartition your drive.