techonsapevole ⚡ on Nostr: SECURE LINUX INSTALLATION: LUKS2 ENCRYPTION AND SYSTEMD-BOOT BOOTLOADER Not all Linux ...
SECURE LINUX INSTALLATION: LUKS2 ENCRYPTION AND SYSTEMD-BOOT BOOTLOADER
https://youtu.be/QcX4Zm6TKSoNot all Linux distributions allow for a secure Linux installation, or at least it is not always so straightforward to enable the components that provide both stability and security.
.
✅ systemd-boot: a new bootloader that replaces GRUB and supports encrypted partitions with LUKS2.
✅ LUKS2: the latest version of LUKS, considered the most secure, but many Linux distributions still use LUKS (version 1).
✅ Immutability: this refers to secure updates that do not risk breaking the stability of the system in use and allow us to roll back if necessary. Additionally, the root / is read-only, meaning that system applications cannot be modified directly.
.
#linux #security
Published at
2023-11-25 17:27:41Event JSON
{
"id": "484c09f8cf05d7fb194baf203fb96fcd2b7a2f07d09ea9ca01f8cfb770312e4b",
"pubkey": "d3af49435bb13c695232fd8ca8c9e73db8c65630553baef83f9544e81cef9be7",
"created_at": 1700933261,
"kind": 1,
"tags": [
[
"t",
"linux"
],
[
"t",
"linux"
],
[
"t",
"security"
],
[
"t",
"security"
],
[
"r",
"https://youtu.be/QcX4Zm6TKSo"
]
],
"content": "SECURE LINUX INSTALLATION: LUKS2 ENCRYPTION AND SYSTEMD-BOOT BOOTLOADER\nhttps://youtu.be/QcX4Zm6TKSo\nNot all Linux distributions allow for a secure Linux installation, or at least it is not always so straightforward to enable the components that provide both stability and security.\n.\n✅ systemd-boot: a new bootloader that replaces GRUB and supports encrypted partitions with LUKS2.\n✅ LUKS2: the latest version of LUKS, considered the most secure, but many Linux distributions still use LUKS (version 1).\n✅ Immutability: this refers to secure updates that do not risk breaking the stability of the system in use and allow us to roll back if necessary. Additionally, the root / is read-only, meaning that system applications cannot be modified directly.\n.\n#linux #security",
"sig": "e63e523d0eb9ce07da64c8d37b8031c2076c75d90220a4facad642922d04c00135b58edea4f7f876ce8bd5665335170c8dd56b27ba818b4caaacc6e667e1e286"
}