Today I’m diving into the world of Secure Boot, TPM2, and all of the complications that come with wanting a high level of security without having to type a disk encryption key all the time. Ultimately, my goal is to come up with a solution that I can roll out in my Linux-based business environment, but today I’m walking you through the basics of how full disk encryption works with LUKS and enrolling your first key into the TPM.

I’ve been working on taking back my data (from Microsoft) by building out my business around Linux. But, the big question I get every time I talk about it is ‘What about Group Policy?’. Of course, Group Policy is the name of a Microsoft product, and you wouldn’t try to manage your ChromeOS fleet with it, so why try to force it on Linux too? Fundamentally, it’s just a method of pushing registry and configuration to machines, which we can already do on Linux with packages or automation, but of course the Linux desktop is not a clone of Windows, so what configuration should we push?

Today, I’m trying to solve a problem for my Anti-Microsoft Organization - how to manage installing software and configurations on organizational computers. I’m building my own packages, and relying on the package manager (apt or dnf) to manage my software! Contents Video Package Test Deb Package Deb Repository Rpm Package Rpm Repository Video Package Test I’m going to create a Git repo which holds all of the configuration packages in my organization.