I recently switched to Linux (Zorin OS) and I selected “use ZFS and encrypt” during installation. Now before I can log in it asks me “please unlock disk keystore-rpool” and I have to type in the encryption password it before I’m able to get to the login screen.

Is there a way to do this automatically like with Windows or MacOS? Zorin has biometric login which is nice but this defeats the purpose especially because the encryption password is long and tedious to type in.

Also might TPM have anything to do with this?

EDIT: Based on the responses I have to assume some of you guys live in windowless underground bunkers sealed off with concrete because door locks “aren’t secure against battering rams”. Normal people don’t need perfect encryption they just want to add an extra hurdle or two for the crackhead who steals the PC. I assumed Linux had a system similar to what Windows or MacOS has been doing for a decade but I am apparently wrong.

  • Skull giver@popplesburger.hilciferous.nl
    121·
    7 months ago

    You can configure Linux to automatically log you in after decrypting the disk. You can also configure Linux to automatically unlock the disk through a TPM. However, like on consumer versions of Windows, this doesn’t require authentication like a fingerprint.

    I have no idea how to do it on Zorin, though. There are guides online about how to do it, but they’re not written for Zorin’s target audience (Linux beginners, mostly).

    I think you’re right that this stuff should be easier. However, Linux lacks proper integration between the biometrics system and the TPM that Windows and MacOS have, so what you want is technically very difficult at the moment. Unfortunately, the phobia many Linux people have for technologies like TPMs will probably make it take a while before such features will be available.