UKIs, TPMs, immutable initrds and full disk encryption – What Distributions Should Keep in Mind when Hopping onto the… https://peertube.watch/videos/watch/9d51fe56-8a5b-4eca-838d-939f5f3f92ff Traditional Linux support for an integrity protected boot process has been relatively weak. Beyond the minimum effort to provide basic SecureBoot compatibility most distributions haven't (yet) delivered tangible benefits to users. In this talk I'd like to give an overview on how distributions can reasonably jump on the system integrity train, that makes the boot process and OS somewhat proof to offline attacks, and allows them to catch up with similar functionality that other commercial OSes have already been providing for a while. This talk will be from a systemd perspective, and focus on the various OS integrity components we now provide, and how to put them together, with a focus on keeping things nicely generic, democatric, and modular without compromising security. Specifically, we'll touch immutable initrds, UKIs, full disk encryption policies, TPM, and Measured Boot vs. Secure Boot, and more, → systemd Homepage Speaker: Lennart Poettering, Track: Distributions devroom, Room: UA2.118 (Henriot), When: Sunday 4 February 2024, 09:00–09:55 (Brussels time), Schedule: FOSDEM 2024 event page, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “UKIs, TPMs, immutable initrds and full disk encryption – What Distributions Should Keep in Mind when Hopping onto the System Integrity Train” by Lennart Poettering, FOSDEM 2024. Original recording: 2024/ua2118/fosdem-2024-1985-ukis-tpms-immutable-initrds-and-full-disk-encryption-what-distributions-should-keep-in-mind-when-hopping-onto-the-system-integrity-train.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Sat, 24 Oct 2026 01:30:29 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch UKIs, TPMs, immutable initrds and full disk encryption – What Distributions Should Keep in Mind when Hopping onto the… https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/9d51fe56-8a5b-4eca-838d-939f5f3f92ff All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.