Add support for encryption
One thing that is preventing me from daily driving this distribution is the lack of encryption. While I can probably do manual partitioning and then use a terminal to encrypt things, I believe having out of the box support would be better because it'll be less likely to break with updates.
Options:
1. Full disk encryption which requires a password at boot. This would be my preferred option if possible. Documentation: https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system
2. Home directory encryption, which allows booting but decrypts on login. May offer more flexibility, be less work to implement? Documentation: https://www.raeder.dev/post/encrypt-home-directory https://wiki.archlinux.org/title/ECryptfs
My main reason for requiring encryption is sometimes I may leave my device unattended, such as if I go to the store, walk to a bath room, or go through the TSA, and in doing so I lock my device or power it off. Its possible for a robber to break into my house or otherwise an evil maid to take the device and pull all of my data. Most robbers do not steal desktops for their material values anymore, but for the data on it.
How to: Encrypt your Home directory in Arch Linux - Benjamin's Blog
How to encrypt the user home directory in Arch Linux
2 Replies
@Rudra | blendOS, Ubuntu Unity
Same for me, I was always with a FDE (Full Disk Encryption) since may be 15 years on GNU/Linux for security reasons, even on immutable OS like Fedora Silverblue and currently under OpenSuse Aeon (old name MicroOS).
I hope BlendOS could support this one day, to permit me to switch to this awesome distro!