On Thu, 4 Jun 2020 10:13:59 -0600
Chris Murphy <lists(a)colorremedies.com> wrote:
Also, as it relates to authenticated encrypted hibernation images,
the
upstream proposal is that since hibernation images can exist anywhere,
they should always be encrypted independently from swap, and therefore
not depend on whether swap is encrypted or how.
Just following the conversation for information purposes, but I have
questions. If systemd-boot were to be used as boot service, could the
hibernate image be written to /boot/efi in place of the kernel and
initramfs, or in parallel? Would systemd-boot be able to use it? Would
that satisfy the encrypted and signed requirements?