Configures LUKS disk encryption, TPM auto-unlock, and system-level security settings for Bazzite Linux.
This skill provides specialized automation for hardening Bazzite Linux installations through LUKS disk encryption and TPM 2.0 integration. It enables users to set up seamless, passwordless boot sequences via TPM auto-unlock, manage Secure Boot keys, and customize administrative security settings like sudo password feedback. It is an essential tool for Bazzite users who want to balance robust data protection with hardware-backed convenience while maintaining a secure terminal environment.
Key Features
01TPM hardware status and diagnostic reporting
02Sudo password asterisk feedback toggling
03Secure Boot key enrollment and management
04TPM 2.0 auto-unlock for LUKS disk encryption
05LUKS binding removal and recovery workflows
060 GitHub stars
Use Cases
01Enabling secure, passwordless boot on encrypted Bazzite systems
02Re-enrolling TPM bindings after BIOS updates or hardware changes
03Customizing terminal security preferences for administrative tasks
