Is it possible for the KDE Neon installer (and the future kdelinux installer) to support a hardware (TPM 2.0) backed disk encryption?
Is it possible to have an app (either command line or gui or both) to encrypt an existing filesystem also using TPM?
Hi - definitely way outside my area of knowledge, but just one minor comment on the scope: I would think that it would only make sense to encrypt the data on a system that’s mutable and unique to the user - things like ~, caches that would potentially include personal data, etc.
Intuitively, I wouldn’t think that there’s much to be gained by encrypting my local copy of the /usr/bin/konsole binary, since it would be identical to everyone else’s copy - but my financial documents in ~/Documents would be a much greater concern 