Securing the system and boot process: Including encrypting systems, Logical Volume Management (LVM), trusted execution environment, secure enclave, Supervisor Mode Access Prevention, Intel Management Engine (ME) and AMD Platform Security Processor (PSP)

Encryption and early user space

Encrypting a partition not used in the boot process

Encrypting the swap partition

Early user space and encrypting the root partition

Logical volume management (LVM) and encrypting the boot partition

Logical Volume Management (LVM)

Securing the boot partition

Getting UEFI Secure Boot working with LVM

Trusted Platform Module (TPM)

Redundant array of independent disks (RAID) in software

ZFS, BTRFS and BcacheFS

Non-SATA storage: USB including usbutils (lsusb list usb devices)

Non-SATA storage: USB including pciutils (lspci list pci devices)

Non-SATA storage: USB including usbutils (lsusb)

More on Pluggable Authentication Modules (PAM)

Encrpytion and hardware authentication with Pluggable Authentication Modules (PAM)

Encrpytion and hardware authentication with Pluggable Authentication Modules (PAM)

Introduction

Introduction