document/TranslateProject
2
0
Fork 0
mirror of https://github.com/LCTT/TranslateProject.git synced 2025-03-27 02:30:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #30080 from geekpi/translating

Browse Source 
translated
This commit is contained in:
geekpi 2023-09-12 08:52:33 +08:00 committed by GitHub
commit 3dc5b2b56a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 86 additions and 90 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

90
sources/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md
View File

@ -1,90 +0,0 @@
[#]: subject: "Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption"
[#]: via: "https://news.itsfoss.com/ubuntu-23-10-disk-encryption/"
[#]: author: "Sourav Rudra https://news.itsfoss.com/author/sourav/"
[#]: collector: "lujun9972/lctt-scripts-1693450080"
[#]: translator: "geekpi"
[#]: reviewer: " "
[#]: publisher: " "
[#]: url: " "
Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption
======
Moving forward, Ubuntu will let you utilize TPM-backed Full Disk
Encryption. But, is this something you would like?
Ubuntu 23.10 daily builds keep getting exciting new additions!
Earlier we had covered the [major PPA changes][1], and the new [Flutter-based store][2] (which also landed with the latest daily builds).
Now, we have yet another major change that is set to enhance the security of Ubuntu systems; by changing how users handle the encrypting of their disks (if enabled).
The initial support for the feature is set to arrive with Ubuntu 23.10 and will be improved in future Ubuntu releases.
**Suggested Read** 📖
![][3]
### Ubuntu 23.10: TPM-backed Full Disk Encryption
![][4]
Introduced as **an experimental feature** , TPM-backed Full Disk Encryption (FDE) is a major change from how Ubuntu has been handling FDE for the past 15 years.
**In the existing system** , a passphrase mechanism was in place, that would authenticate users by accepting a user-set phrase that would then be used to provide access to the disk.
All of this was made possible due to the integration of the **[Linux Unified Key Setup][5]** (LUKS) framework, which handles disk encryption at the block level.
**With the TPM-backed system** , the TPM chip on your motherboard will be used to provide full disk encryption, doing away with the need for a passphrase.
The **chip will handle the decryption of the secret key** that locks the full EFI state, and the kernel command line. That is only possible when the device boots with software that has been defined as ' **authorized** ' to access confidential data.
📋
TPM stands for [Trusted Platform Module][6].
**But, there's a catch.**
TPM-backed FDE is based on the [same architecture][7] as [Ubuntu Core][8], this has resulted in the sharing of many key components that are **delivered as snap packages**. So, things such as the **bootloader** (shim/GRUB) and **kernel assets** are delivered via snap.
Luckily, this new **TPM-backed FDE is not the only way of encrypting disks**. The **conventional passphrases system will still be in place** , for those who don't want to use the new system.
Users can also use the new system alongside passphrases to further bolster their security.
For technical details on how TPM-backed disk encryption works, I suggest you go through Ubuntu's [official blog][9] post.
**Interested in testing this out?** 🤔
🚧
Testing any experimental feature could result in total data loss. So, try it at your own risk.
Well, TPM-backed FDE has been rolled out into the [**daily builds**][10] of **Ubuntu 23.10** , you just have to set it up during installation as shown in the screenshot in the article.
The new FDE option is available under ' **Advanced Features** ' during the selection of the type of install on the Ubuntu installer.
_💬 What do you think of this new experimental feature? Share your thoughts in the comments below._
* * *
--------------------------------------------------------------------------------
via: https://news.itsfoss.com/ubuntu-23-10-disk-encryption/
作者：[Sourav Rudra][a]
选题：[lujun9972][b]
译者：[译者ID](https://github.com/译者ID)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]: https://news.itsfoss.com/author/sourav/
[b]: https://github.com/lujun9972
[1]: https://news.itsfoss.com/ubuntu-23-10-ppa/
[2]: https://news.itsfoss.com/ubuntu-23-10-ubuntu-store/
[3]: https://news.itsfoss.com/content/images/size/w256h256/2022/08/android-chrome-192x192.png
[4]: https://news.itsfoss.com/content/images/2023/09/Ubuntu_23.10_TPM_FDE.png
[5]: https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup
[6]: https://en.wikipedia.org/wiki/Trusted_Platform_Module
[7]: https://ubuntu.com/core/docs/uc20/full-disk-encryption
[8]: https://ubuntu.com/core
[9]: https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu
[10]: https://cdimage.ubuntu.com/daily-live/current/

86
translated/news/20230908 Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption.md Normal file
View File

@ -0,0 +1,86 @@
[#]: subject: "Ubuntu 23.10 to Feature Experimental TPM-backed Full Disk Encryption"
[#]: via: "https://news.itsfoss.com/ubuntu-23-10-disk-encryption/"
[#]: author: "Sourav Rudra https://news.itsfoss.com/author/sourav/"
[#]: collector: "lujun9972/lctt-scripts-1693450080"
[#]: translator: "geekpi"
[#]: reviewer: " "
[#]: publisher: " "
[#]: url: " "
Ubuntu 23.10 将提供实验性 TPM 支持的全磁盘加密
======
展望未来，Ubuntu 将允许你利用 TPM 支持的全磁盘加密。但是，这是你想要的吗？
Ubuntu 23.10 每日构建不断增加令人兴奋的新功能！
早些时候，我们介绍了[主要的 PPA 更改][1]和新的[基于 Flutter 的商店][2]（也随最新的每日构建一起发布）。
现在，我们又进行了另一项重大更改，通过更改用户处理磁盘加密的方式（如果启用），增强 Ubuntu 系统的安全性。
该功能的初始支持将在 Ubuntu 23.10 中提供，并将在未来的 Ubuntu 版本中得到改进。
### Ubuntu 23.10：TPM 支持的全磁盘加密
![][4]
TPM 支持的全磁盘加密 (FDE) 作为**一项实验性功能**引入，是 Ubuntu 过去 15 年处理 FDE 方式的重大变化。
**在现有系统中**，采用了密码机制，该机制将通过接受用户设置的密码来对用户进行身份验证，然后使用该密码提供对磁盘的访问。
所有这一切都是由于集成了 **[Linux 统一密钥设置][5]** (LUKS) 框架而成为可能，该框架在块级别处理磁盘加密。
**使用 TPM 支持的系统**，主板上的 TPM 芯片将用于提供全磁盘加密，而无需密码。
**芯片将处理锁定完整 EFI 状态的密钥**以及内核命令行的解密。只有当设备使用已定义为“**授权**”来访问机密数据的软件启动时，才有可能实现这一点。
📋
TPM 代表[可信平台模块][6]。
**但是，有一个问题。**
TPM 支持的 FDE 基于与 [Ubuntu Core][8] [相同的架构][7]，这导致了许多关键组件的共享，这些组件**以 snap 包的形式提供**。因此，**引导加载程序**（shim/GRUB）和**内核文件**等内容是通过 snap 交付的。
幸运的是，这种新的 **TPM 支持的 FDE 并不是加密磁盘的唯一方法**。对于那些不想使用新系统的人来说，**传统密码系统仍将存在**。
用户还可以使用新系统和密码来进一步增强安全性。
有关 TPM 支持的磁盘加密如何工作的技术细节，我建议你阅读 Ubuntu 的[官方博客][9]。
**有兴趣测试一下吗？** 🤔
🚧
测试任何实验功能都可能导致全部数据丢失。因此，请自行承担风险。
好吧，TPM 支持的 FDE 已推出到 **Ubuntu 23.10** 的[**每日构建**][10]中，你只需在安装过程中进行设置，如本文中的截图所示。
在 Ubuntu 安装程序中选择安装类型时，可在“**高级功能**”下使用新的 FDE 选项。
_💬 你对这个新的实验性功能有何看法？ 在下面的评论中分享你的想法。_
* * *
--------------------------------------------------------------------------------
via: https://news.itsfoss.com/ubuntu-23-10-disk-encryption/
作者：[Sourav Rudra][a]
选题：[lujun9972][b]
译者：[geekpi](https://github.com/geekpi)
校对：[校对者ID](https://github.com/校对者ID)
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
[a]: https://news.itsfoss.com/author/sourav/
[b]: https://github.com/lujun9972
[1]: https://news.itsfoss.com/ubuntu-23-10-ppa/
[2]: https://news.itsfoss.com/ubuntu-23-10-ubuntu-store/
[3]: https://news.itsfoss.com/content/images/size/w256h256/2022/08/android-chrome-192x192.png
[4]: https://news.itsfoss.com/content/images/2023/09/Ubuntu_23.10_TPM_FDE.png
[5]: https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup
[6]: https://en.wikipedia.org/wiki/Trusted_Platform_Module
[7]: https://ubuntu.com/core/docs/uc20/full-disk-encryption
[8]: https://ubuntu.com/core
[9]: https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu
[10]: https://cdimage.ubuntu.com/daily-live/current/