From 6992d0ee2d146ead7c87c35b943dedc4fa4c591d Mon Sep 17 00:00:00 2001 From: geekpi Date: Tue, 12 Sep 2023 08:51:19 +0800 Subject: [PATCH] translated --- ...imental TPM-backed Full Disk Encryption.md | 90 ------------------- ...imental TPM-backed Full Disk Encryption.md | 86 ++++++++++++++++++ 2 files changed, 86 insertions(+), 90 deletions(-) delete mode 100644 sources/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md create mode 100644 translated/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md diff --git a/sources/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md b/sources/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md deleted file mode 100644 index 15ef9c3ca5..0000000000 --- a/sources/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md +++ /dev/null @@ -1,90 +0,0 @@ -[#]: subject: "Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption" -[#]: via: "https://news.itsfoss.com/ubuntu-23-10-disk-encryption/" -[#]: author: "Sourav Rudra https://news.itsfoss.com/author/sourav/" -[#]: collector: "lujun9972/lctt-scripts-1693450080" -[#]: translator: "geekpi" -[#]: reviewer: " " -[#]: publisher: " " -[#]: url: " " - -Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption -====== -Moving forward, Ubuntu will let you utilize TPM-backed Full Disk -Encryption. But, is this something you would like? -Ubuntu 23.10 daily builds keep getting exciting new additions! - -Earlier we had covered the [major PPA changes][1], and the new [Flutter-based store][2] (which also landed with the latest daily builds). - -Now, we have yet another major change that is set to enhance the security of Ubuntu systems; by changing how users handle the encrypting of their disks (if enabled). - -The initial support for the feature is set to arrive with Ubuntu 23.10 and will be improved in future Ubuntu releases. - -**Suggested Read** 📖 - -![][3] - -### Ubuntu 23.10: TPM-backed Full Disk Encryption - -![][4] - -Introduced as **an experimental feature** , TPM-backed Full Disk Encryption (FDE) is a major change from how Ubuntu has been handling FDE for the past 15 years. - -**In the existing system** , a passphrase mechanism was in place, that would authenticate users by accepting a user-set phrase that would then be used to provide access to the disk. - -All of this was made possible due to the integration of the **[Linux Unified Key Setup][5]** (LUKS) framework, which handles disk encryption at the block level. - -**With the TPM-backed system** , the TPM chip on your motherboard will be used to provide full disk encryption, doing away with the need for a passphrase. - -The **chip will handle the decryption of the secret key** that locks the full EFI state, and the kernel command line. That is only possible when the device boots with software that has been defined as ' **authorized** ' to access confidential data. - -📋 - -TPM stands for [Trusted Platform Module][6]. - -**But, there's a catch.** - -TPM-backed FDE is based on the [same architecture][7] as [Ubuntu Core][8], this has resulted in the sharing of many key components that are **delivered as snap packages**. So, things such as the **bootloader** (shim/GRUB) and **kernel assets** are delivered via snap. - -Luckily, this new **TPM-backed FDE is not the only way of encrypting disks**. The **conventional passphrases system will still be in place** , for those who don't want to use the new system. - -Users can also use the new system alongside passphrases to further bolster their security. - -For technical details on how TPM-backed disk encryption works, I suggest you go through Ubuntu's [official blog][9] post. - -**Interested in testing this out?** 🤔 - -🚧 - -Testing any experimental feature could result in total data loss. So, try it at your own risk. - -Well, TPM-backed FDE has been rolled out into the [**daily builds**][10] of **Ubuntu 23.10** , you just have to set it up during installation as shown in the screenshot in the article. - -The new FDE option is available under ' **Advanced Features** ' during the selection of the type of install on the Ubuntu installer. - -_💬 What do you think of this new experimental feature? Share your thoughts in the comments below._ - -* * * - --------------------------------------------------------------------------------- - -via: https://news.itsfoss.com/ubuntu-23-10-disk-encryption/ - -作者：[Sourav Rudra][a] -选题：[lujun9972][b] -译者：[译者ID](https://github.com/译者ID) -校对：[校对者ID](https://github.com/校对者ID) - -本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出 - -[a]: https://news.itsfoss.com/author/sourav/ -[b]: https://github.com/lujun9972 -[1]: https://news.itsfoss.com/ubuntu-23-10-ppa/ -[2]: https://news.itsfoss.com/ubuntu-23-10-ubuntu-store/ -[3]: https://news.itsfoss.com/content/images/size/w256h256/2022/08/android-chrome-192x192.png -[4]: https://news.itsfoss.com/content/images/2023/09/Ubuntu_23.10_TPM_FDE.png -[5]: https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup -[6]: https://en.wikipedia.org/wiki/Trusted_Platform_Module -[7]: https://ubuntu.com/core/docs/uc20/full-disk-encryption -[8]: https://ubuntu.com/core -[9]: https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu -[10]: https://cdimage.ubuntu.com/daily-live/current/ diff --git a/translated/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md b/translated/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md new file mode 100644 index 0000000000..05d589829e --- /dev/null +++ b/translated/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md @@ -0,0 +1,86 @@ +[#]: subject: "Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption" +[#]: via: "https://news.itsfoss.com/ubuntu-23-10-disk-encryption/" +[#]: author: "Sourav Rudra https://news.itsfoss.com/author/sourav/" +[#]: collector: "lujun9972/lctt-scripts-1693450080" +[#]: translator: "geekpi" +[#]: reviewer: " " +[#]: publisher: " " +[#]: url: " " + +Ubuntu 23.10 将提供实验性 TPM 支持的全磁盘加密 +====== +展望未来，Ubuntu 将允许你利用 TPM 支持的全磁盘加密。但是，这是你想要的吗？ + +Ubuntu 23.10 每日构建不断增加令人兴奋的新功能！ + +早些时候，我们介绍了[主要的 PPA 更改][1]和新的[基于 Flutter 的商店][2]（也随最新的每日构建一起发布）。 + +现在，我们又进行了另一项重大更改，通过更改用户处理磁盘加密的方式（如果启用），增强 Ubuntu 系统的安全性。 + +该功能的初始支持将在 Ubuntu 23.10 中提供，并将在未来的 Ubuntu 版本中得到改进。 + +### Ubuntu 23.10：TPM 支持的全磁盘加密 + +![][4] + +TPM 支持的全磁盘加密 (FDE) 作为**一项实验性功能**引入，是 Ubuntu 过去 15 年处理 FDE 方式的重大变化。 + +**在现有系统中**，采用了密码机制，该机制将通过接受用户设置的密码来对用户进行身份验证，然后使用该密码提供对磁盘的访问。 + +所有这一切都是由于集成了 **[Linux 统一密钥设置][5]** (LUKS) 框架而成为可能，该框架在块级别处理磁盘加密。 + +**使用 TPM 支持的系统**，主板上的 TPM 芯片将用于提供全磁盘加密，而无需密码。 + +**芯片将处理锁定完整 EFI 状态的密钥**以及内核命令行的解密。只有当设备使用已定义为“**授权**”来访问机密数据的软件启动时，才有可能实现这一点。 + +📋 + +TPM 代表[可信平台模块][6]。 + +**但是，有一个问题。** + +TPM 支持的 FDE 基于与 [Ubuntu Core][8] [相同的架构][7]，这导致了许多关键组件的共享，这些组件**以 snap 包的形式提供**。因此，**引导加载程序**（shim/GRUB）和**内核文件**等内容是通过 snap 交付的。 + +幸运的是，这种新的 **TPM 支持的 FDE 并不是加密磁盘的唯一方法**。对于那些不想使用新系统的人来说，**传统密码系统仍将存在**。 + +用户还可以使用新系统和密码来进一步增强安全性。 + +有关 TPM 支持的磁盘加密如何工作的技术细节，我建议你阅读 Ubuntu 的[官方博客][9]。 + +**有兴趣测试一下吗？** 🤔 + +🚧 + +测试任何实验功能都可能导致全部数据丢失。因此，请自行承担风险。 + +好吧，TPM 支持的 FDE 已推出到 **Ubuntu 23.10** 的[**每日构建**][10]中，你只需在安装过程中进行设置，如本文中的截图所示。 + +在 Ubuntu 安装程序中选择安装类型时，可在“**高级功能**”下使用新的 FDE 选项。 + +_💬 你对这个新的实验性功能有何看法？ 在下面的评论中分享你的想法。_ + +* * * + +-------------------------------------------------------------------------------- + +via: https://news.itsfoss.com/ubuntu-23-10-disk-encryption/ + +作者：[Sourav Rudra][a] +选题：[lujun9972][b] +译者：[geekpi](https://github.com/geekpi) +校对：[校对者ID](https://github.com/校对者ID) + +本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出 + +[a]: https://news.itsfoss.com/author/sourav/ +[b]: https://github.com/lujun9972 +[1]: https://news.itsfoss.com/ubuntu-23-10-ppa/ +[2]: https://news.itsfoss.com/ubuntu-23-10-ubuntu-store/ +[3]: https://news.itsfoss.com/content/images/size/w256h256/2022/08/android-chrome-192x192.png +[4]: https://news.itsfoss.com/content/images/2023/09/Ubuntu_23.10_TPM_FDE.png +[5]: https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup +[6]: https://en.wikipedia.org/wiki/Trusted_Platform_Module +[7]: https://ubuntu.com/core/docs/uc20/full-disk-encryption +[8]: https://ubuntu.com/core +[9]: https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu +[10]: https://cdimage.ubuntu.com/daily-live/current/