The post-installation is where 'the hard work starts.' It gets different in how to store the key inside the TPM, and building an inistramfs image that can read that key.

I am still working on the post install processes. I installed with both LUKS and separately with ZFS native encryption. The install is the same 'manually install' of ZFS-On-Root with encryption. It is easier than I thought it would be, so far. Last edited by MAFoElffen October 14th, 2023 at 05:03 PM. Just, so I know the whys and can stay in touch with what is pushing the Users I support. Why 23.10 on a work computer? You know you can setup encryption keys on on cards and USB flash drives right? Why the requirement for TPM stored key?

23.10 is considered as 'development' (not-stable). My question to you is: Jammy Ubuntu 22.04.3 LTS) has ZFS-On-Root with encryption. I know these say for partition size, but once they tell me where those new files are, that will open the door to change other options. That there 'are' actually Users from here, that need that option to tweak things. Maybe you could add a comment in each, to add weight to them, so that they see it's not just me asking for Users. We used to be able to do tweaking during the install, with the old installers. But that is beyond the basic skills of most normal users. I'm working on it for us to be able to tweak the ZFS install options from the defaults they have set within the canned scripts. I have some questions in for the developers and maintainers of ubuntu-desktop-installer where we can find something to modify the options from a command line during the install. Not currently, at least not for the new installer for 23.10. My current answer is: Let me play with it and see for myself. The TPM will only reveal the key to code executing inside of the initramfs if the boot environment has previously been authorised to access the confidential data.So. For full disk encryption, Ubuntu stores the disk encryption key outside of the TPM, protected by the TPM's storage hierarchy inside a sealed data object.

ExtraMAME 23.10 instal the new for mac