Hi there,

Win10 is soon not supported. Tbh Linux have been on my radar since I started to break from the US big tech.

But how is security handled in Linux? Linux is pretty open-source, or am I not understanding it correctly. So how can I as a new user make sure to have the most secure machine as possible?

  • procapra@lemmy.ml
    link
    fedilink
    arrow-up
    8
    ·
    2 days ago

    Why not? You (usually) just click the check box during install, and you have 1 extra password when you boot up your system. Doesn’t seem too hard but I might be missing something.

    • Jumuta@sh.itjust.works
      link
      fedilink
      arrow-up
      12
      ·
      2 days ago

      when you fuck shit up you can’t really easily boot in from a usb drive and learn the recovery process

      • Xylight@lemdro.id
        link
        fedilink
        English
        arrow-up
        5
        ·
        edit-2
        2 days ago

        It’s a few extra steps to start fixing, but it’s still definitely possible once you get the crypto device mapper.

        • Attacker94@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          3 hours ago

          So long as you know that is the trade off, I would tend to agree with you, but knowing the standard desktop user, most will opt for the opposite of your statement.

    • Tenderizer78@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      It’s surprisingly annoying trying to configure LUKS full disk encryption. I had to look up instructions many times over on Mint.

      • NewNewAugustEast@lemmy.zip
        link
        fedilink
        arrow-up
        2
        ·
        1 day ago

        Wait what? I don’t use mint, but with every other distro you just check the box at install and that is it.

        Are you saying its hard to configure after you have already installed? I could imagine it might be, but why not export a list of programs you use and back up the home directory. Reinstall and check the box, restore home, and import your package list?

        • Tenderizer78@lemmy.ml
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 day ago

          Firstly, LUKS is under “physical disk for encryption” which is a stupid and confusing name.

          Secondly, if you want to dual-boot with LUKS you need to manually configure the partitions.

          Thirdly, you need to seperately assign root to be installed on the “physical disk for encryption”, and they have multiple volumes for that in the list.

          Fourthly, as with all LUKS encrypted Linux distros you need a seperate EFI, boot, and root partition.

          Fifthly, all of this partitioning is on a really small window that can’t be resized.

          • NewNewAugustEast@lemmy.zip
            link
            fedilink
            arrow-up
            3
            ·
            1 day ago

            I don’t dual boot, so I guess there is that. But everything else seems very confusing. All other installers say, do you want this encrypted? You click yes. And that’s it.

            • Tenderizer78@lemmy.ml
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 day ago

              TBH I’ve installed Mint, Kubuntu, and OpenSUSE and I don’t remember which ones had which issues. I think they’re all Mint but maybe not.