My laptop isn’t under my supervision most of the time. And I’d hate it if someone were to steal my SSD, or whole laptop even, when I’m not around. Is there a way to encrypt everything, but still keep the device in sleep, and unclock it without much delay. It’s a very slow laptop. So decryption on login isn’t viable, takes too long. While booting up also takes forever, so it needs to be in a “safe” state when simply logged out. Maybe a way that’s decrypt-on-demand?

I’m on Arch with KDE.

  • sudo@programming.dev
    link
    fedilink
    arrow-up
    2
    arrow-down
    1
    ·
    2 months ago

    I think PopOS can safely assume that its being installed on a laptop with only one drive. If there’s multiple drives involved then the setup gets far more complicated as you then must go to something like an LUKS on LVM setup. Basically, for a desktop there’s no safe defaults for FDE.

    • JubilantJaguar@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      2 months ago

      Sure, but in that case the default encryption could easily be switched off for multiple-drive setups. Basically, the default setting is what’s important.