Extraordinary how Linux continues to be 20 years behind Microsoft and Apple when it comes to FDE. This is a hilariously stupid level of complexity for something that should have a universal solution across distros by now.
This is literally a one click process in Windows (plus a couple shell commands to enable TPM+PIN).
tpm2totp used to do this, eliminating the need to divulge the secret used to unlock the TPM, I now see that it has not seen a commit in 2 years.
I also hear mjg59 is looking into encrypted swap hibernation support, so there's a slim chance there will be some development on the system-attestation front.
This is literally a one click process in Windows (plus a couple shell commands to enable TPM+PIN).
Windows and macOS both can do FDE with good UI/UX compared to Linux.
I also hear mjg59 is looking into encrypted swap hibernation support, so there's a slim chance there will be some development on the system-attestation front.