Remix.run Logo
▲ hparadiz 3 hours ago

Has nothing to do with distros. This is you encrypting your disk for the kernel to open during boot. It literally prompts you normally when it hits the step where it attempts to mount the main partition. The way Linux does it is far more flexible and secure because the keys aren't sent to some third party and no one can unlock it without your keys. You are free to use anything to sign the LUKS partition besides a TPM or some silly pin like a Yubikey or whatever the hell you want.

▲lakeviewterrace 3 hours ago | parent [-]

It has EVERYTHING to do with distros.

The process is wholly dependent on bootloaders, systemd versions, and a bunch of other version-specific tooling.

Which none of the distros can ever agree on, so there are 50 variations of implementing disk encryption.

▲hparadiz an hour ago | parent [-]

It's all luks2 and kernel negotiation. You use fdisk or similiar to partition and then the kernel mounts it based on the bootloader config.

Literally the only thing distros can do is give you options during install for the partitioning but that is a personal decision for people and it's basically remaking gparted.

please have an llm explain it to you.