Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #275191
| From | Stefan Monnier <monnier@iro.umontreal.ca> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Trying to configure hibernate / resume |
| Date | 2024-12-03 15:30 +0100 |
| Message-ID | <JPC4x-dt6c-3@gated-at.bofh.it> (permalink) |
| References | <JOzV7-cOl0-3@gated-at.bofh.it> <JOBWV-cPM6-9@gated-at.bofh.it> <JOCgh-cPSg-3@gated-at.bofh.it> <JODP3-cQWc-5@gated-at.bofh.it> <JOEL7-cRAv-5@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
>> > The answer seems to be to install with LVM and encryption. That ensures
>> > that the swap area is encrypted and *cannot* be messed with while the
>> > device is hibernated (which is the rationale for Secure Boot not allowing
>> > hibernation to a "naked" swap partition).
>> How does UEFI know about Debian's swap and how does it know whether
>> it's encrypted?
> If SB is *enabled* then certain functions are restricted when considering
> what can be done by kernel modules.
So IIUC the restriction is imposed by the Linux kernel rather than by
the machine's firmware (BIOS/UEFI/...)?
That would indeed explain how it knows whether it's encrypted. 🙂
Stefan
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Trying to configure hibernate / resume Richmond <dnomhcir@gmx.com> - 2024-11-30 19:00 +0100
Re: Trying to configure hibernate / resume Richmond <dnomhcir@gmx.com> - 2024-11-30 21:10 +0100
Re: Trying to configure hibernate / resume "Andrew M.A. Cater" <amacater@einval.com> - 2024-11-30 21:30 +0100
Re: Trying to configure hibernate / resume Stefan Monnier <monnier@iro.umontreal.ca> - 2024-11-30 23:10 +0100
Re: Trying to configure hibernate / resume "Andrew M.A. Cater" <amacater@einval.com> - 2024-12-01 00:10 +0100
Re: Trying to configure hibernate / resume Stefan Monnier <monnier@iro.umontreal.ca> - 2024-12-03 15:30 +0100
Re: Trying to configure hibernate / resume Anssi Saari <anssi.saari@debian-user.mail.kapsi.fi> - 2024-12-02 12:50 +0100
csiph-web