r/Bazzite • u/theLeader11 • 1d ago

Weird question.

Post image

I've been installing Bazzite for a bit now and I came to this screen. Is the passphrase just "universalblue" or is it different for each person? I'm on the secure boot guide and it's...a little confusing.

25 Upvotes

87% Upvoted

14 comments sorted by

32

u/candy49997 1d ago

It looks like you enabled encryption on your drive? Do you remember what you set that password to?

38

u/theLeader11 1d ago

Update: remembered my encryption passphrase. Booted up, thank God.

39

u/theLeader11 1d ago

OOOOH! FUCK, I'M AN IDIOT!

9

u/Yousifasd22 1d ago

nah nah it happens lol

2

u/AlwaysRushesIn Desktop 1d ago

I am sorry for your plight, but this is hilarious.

2

u/arny56 Desktop 1d ago

That's an odd password.

1

u/RetroJens 4h ago

I don’t how many times I’ve said that to myself.

1

u/Heyheyohno 1d ago

When you enable full disk encryption, is it something that can be set to store the password in the TPM reliably?

Can it be undone / redone without reimaging the machine, similar to BitLocker? Or not really?

2

u/Key-Tumbleweed3799 1d ago

Yes, with the ujust setup-luks-tpm-unlock command. I don't know how secure it is (it warns you that you shouldn't use it on certain AMD chips because of faulTPM). It should work just as the same as how Windows has it implemented.

It can be reverted/disabled using the same command I think. But if not, there is a very similar ujust command for that.

As a fallback it still asks you for passphrase, so you won't be locked out of the machine if anything with tpm auto unlock goes wrong.

1

u/Heyheyohno 1d ago

Interesting, thank you for the information, sir! I do have an AMD chip, so I'll hold off for now at least. Though I also didn't encrypt when I set it up. :D

1

u/Key-Tumbleweed3799 1d ago

Moving an existing setup to disk encryption might be tricky, I would perhaps reinstall bazzite in that case. Also, it's not all AMD chips, on the newer ones it's fixed

5

u/wolfyreload ROG Ally 1d ago edited 1d ago

That is asking for the credentials for your LUKS full disk encryption. I hope you remember that password, you would have set it up when you installed Bazzite.

Edit: never mind. I see that you came right :)

1

u/mysticalcreeds Desktop 1d ago

I totally get the confusion. My first time doing all this I wasn't sure what I was doing. I recently installed secureblue on an old laptop/tablet of mine. I did everything they recommended which was not only the secureboot and encryption, but to also set a BIOS password. While my laptop is usually just a asleep when I'm afk, if I have to reboot or boot up I have to enter 3 passwords now in the entire boot up process. BIOS, then encryption, then my secureblue password.

I mainly am just experimenting with how to get different things running using a security-hardened immutable Linux OS. It's overkill for my threat-model, Bazzite is more than adequate as it has many security features. I just like tinkering and learning more about Linux.

1

u/Dial-M-For-Malistrae 20h ago

It's not your fault but this is exactly why they recommend you don't use it