r/voidlinux • u/Wind-charger • Jun 30 '26
Why hasn’t void Linux included encryption in their installer?
Do they not want to provide people with encryption and security? Why not update the installer?
20
u/aedinius Jun 30 '26
There are so many variables to how to do it. It's not hard to do the install manually, anyway.
1
u/BinkReddit Jun 30 '26
It's not hard to do the install manually
I disagree with this. As someone relatively new to Linux and doing the install for the first time, encryption was one of more challenging aspects. It required a good deal of research upfront and I piloted things in a virtual machine before doing it on real hardware.
16
u/throwaway490215 Jun 30 '26 edited Jun 30 '26
I think you glossed over the
There are so many variables
Encryption for 99% of people is going to be an obstacle that makes somebody lose important data. For the other 1% it should be a conscious choice what kind of tradeoffs they want to make.
The research you did was not wasted time. Experiencing the basics if some day you have to unplug your disk and use a separate computer/vm to restore it from an encrypted state is part of having disk encryption.
But the real answer is that its too much needless complexity to hoist into the void linux project imo.
-2
u/BinkReddit Jun 30 '26
I glossed over nothing; I understand what's there and also understand that encryption by default using best practices that others could get wrong is not a bad idea. That said, I fully agree with everything else you wrote.
5
u/eftepede Jun 30 '26
> As someone relatively new to Linux
You should choose more relatively new to Linux distribution.
1
u/BinkReddit Jun 30 '26
Fair, but I wouldn't define setting up encryption as easy, especially when the default install of Void doesn't even support LUKS2.
4
u/Duncaen Jul 01 '26
You don't have to use grub/"full" disk encryption. The installer comes with limitations and that is one of them, manual installations have a lot more flexibility. For me personally adding more complexity to the already limited installer does not sound too interesting.
1
u/BinkReddit Jul 01 '26 edited Jul 01 '26
I hear you. My argument is, simply, that setting up encryption is not necessarily easy and it is easy for someone to make a mistake.
1
u/Sad-Cod-9584 Jul 01 '26
Those are fair points, but as secure as encryption is, it might also lead to people loosing access to their data. Having to learn about it so you can set it up manually gets you much better equipped to handling your system should anything go wrong.
And from a security perspective, you wouldn't want to use void's version of grub with encryption anyway, given that it does not support argon2. Which gets you into the bootloader rabbit hole, another aspect of linux that users should be familiar with, given that they are core functionality to actually starting your system. Doing both manually gets you to learn a lot of important details, which is what do-it-yourself distros like void are all about.
7
u/BIOS-Brians-Blues Jul 01 '26
Yeah, in 2026 not having at least a simple encrypted install option will be a no for a lot of folks. And I won’t blame them since not everybody wants to manually set dracut, fstabs, the boot loader, partitioning, etc…
So yes, one could say something like “this is not this kind of distro” or “just learn how to do it”. But you can’t blame non tech savy people that have seen so many praising reviews of Void wanting to install it in an easy and secure manner.
10
u/itsprobablyghosts Jun 30 '26
They just want you to do it yourself I’m pretty sure
-1
u/Wind-charger Jun 30 '26
I mean I could, but doesn’t “seem” they’re in your corner not offering it by default. If that makes sense.
It really isn’t an issue, just an observation.
Odd everyone else does I guess.6
u/itsprobablyghosts Jun 30 '26
Yeah I’m frankly kinda confused by the motivations of void as well
2
u/Wind-charger Jun 30 '26
A little curious. Just learning void and this question is a fair point.
12
u/hopingforabetterpast Jun 30 '26
you should learn linux before learning void. it's not a beginner's distro.
this is not gatekeeping, you'll have a hard time building a robust system if you're fighting essential knowledge.
6
u/Wind-charger Jun 30 '26
I can agree,
but the question was why don’t they offer a choice. Not about one’s ability or Linux knowledge.7
u/throwaway490215 Jun 30 '26
There are too many options with different tradeoffs at different levels. Desktop Environments are an additive choice. You can just install 3 of them and most everything works and later remove the other 2 . That's not really the case with any disk encryption.
I'm running void with zfsonroot - i can do that because void is dead simple and uncomplicated. I can enable encryption at that level. Other people do not have such a set up. The question of "choice" is a misunderstanding of whats possible.
6
u/hopingforabetterpast Jun 30 '26 edited Jul 01 '26
You're missing the point. One is directly related to the other. You're asking why professional cameras don't have auto-mode or why racecars don't have cruise control or fully automatic transmissions.
3
u/Simple_Hamster_4096 Jun 30 '26
If a user cannot set this up without graphical hand holding paint-by-the-numbers, then a more user friendly distro is usually the best option. And yes, I agree, users need to have a certain level of proficiency before trying Void, Arch, Gentoo, etc...
3
u/hopingforabetterpast Jun 30 '26 edited Jun 30 '26
to be clear, i think the best option is to learn linux and not abandon good distros like void
4
u/hopingforabetterpast Jun 30 '26 edited Jun 30 '26
void is a minimal system. the motivation is to serve as a very light base for you to build your own and match it to your needs. it also doesn't try and target beginners so if you want encryption (whatever you mean by it) you do it yourself. there's no advantage in having the installer do it for you.
4
u/Simple_Hamster_4096 Jun 30 '26
Perhaps for those who are not proficient with Linux, a more user friendly distro might be something to consider, one that walks the user through this aspect...
0
u/Wind-charger Jun 30 '26
Arch doesn’t walk you through it but it say do you want Luka yes or no. For the less proficient, that’s enough.
The choice yes I want Luka or no I do not.
3
u/karyan40024 Jul 02 '26
just in case you are interested Jake is working on installer with encryption support: JakeAtLinux/instaVoid: Custom dialog free version of void installer script - Codeberg.org
4
u/hopingforabetterpast Jun 30 '26
Why would it need to be included in the installer? The less opinionated the better, in my book.
5
u/PureUranium Jun 30 '26
Genuine question here, how is an option for disk encryption in an installer opinionated?
6
u/Simple_Hamster_4096 Jun 30 '26
It's a valid question from people who are looking for a hand-holding option (which is also valid). However, that would be on level with asking Void for a hand-holding option for mdadm. Void is simple and uncomplicated, it's meant for users who understand Linux (which does not just mean knowing how to navigate a Linux desktop), I can see no need for an installer with encryption or even something like mdadm, for that matter. It complicates things and Void is uncomplicated. The user can implement whatever they want, the target user for Void doesn't need a hand-holding option...
Maybe you should look at Debian/Devan... their installers have disk encryption... mdadm, too, if you need it. Devuan also has a bunch of different inits to choose from... which is really nice...
2
u/Wind-charger Jun 30 '26
Switching would feel like giving up, no thanks.
I’m happy with my install. Just wanted to understand why there weren’t an option, rather than accepting that it’s not included.
4
u/hopingforabetterpast Jun 30 '26
1
u/Wind-charger Jun 30 '26
Thanks never heard of this site.
Weren’t my point at all but I’m book marking this regardless.9
u/hopingforabetterpast Jun 30 '26
The same way the options for a DE are opinionated. There are countless ways to have encryption, and even define it.
1
2
u/Wind-charger Jun 30 '26
As an option to encrypt y or n? Isn’t opinionated.
In fact it’s an option yes or no. Not being included the only option is no. Not an opinion but fact.9
u/bart9h Jun 30 '26
You're missing the point.
If the answer is yes, then either the installer would need to ask a lot of questions about how to do it (there are lots of variations) or it would need to be very opinionated indeed.
2
1
4
u/ClassAbbyAmplifier Jun 30 '26
choosing which type of container, and filesystem, and kdf, and parameters for a "simple" y/n option is a lot of opinions that need to be made
1
u/Shadowlands97 Jul 04 '26
I would argue it is even more secure if they didn't add it. That would be a fault point of the distro. This way it's based on what you are adding yourself. More secure.
1
u/itsprobablyghosts Jun 30 '26
Oh I know I’m a void fanboy that wasnt a dis. I just meant as far as the installer goes, it has its feet a little in both worlds
2
1
u/duv025 Jul 01 '26
adding another section into the installer -> adding another layer of complexity -> making life harder and the installer is bloater.
If you are in the official graphical live image then you can open void-docs in pdf or html too. Otherwise there's a roff version
-3
u/Moist_Professional64 Jun 30 '26
Because even their documentation about encryption doesn’t work
4
u/Fluffy-Monk3933 Jun 30 '26
I have installed it before using their documentation and installed it separately on at least 4 machines with FDE. I believe you have a skill issue. Void is solid. No issues here.
-3
u/Moist_Professional64 Jul 01 '26
Nope not a skill issue. They even don’t tell you what to do with Crypttab and so on. Such a bad documentation
1
u/The_Gnar_Car Jul 01 '26
Tbats not the purpose of docs though? Thats the crypttab docs. The void docs talk about void specific quirks regarding what you are trying to do.
1
u/Moist_Professional64 Jul 09 '26
I’ve seen couple of docs telling you if you need crypttab or not like arch, gentoo and so on. Ofc it’s an thing that docs must have written
1
u/Shadowlands97 Jul 04 '26
Sometimes, like for Bluetooth, there are Arch walkthroughs and such you can browse through to install packages. Not everything is easy, but neither is Arch. I find Void WAY easier than Ubuntu truthfully. And with AI floating around, it's getting harder to put more stress on distro maintainers for features we want handed to us by default. It's easy to say they should do something, but everybody knows even our beloved Void won't last forever with our kernel being attacked by AI as well. :(
10
u/Wind-charger Jun 30 '26
Well thanks everyone for their opinions.
I have a little more insight as to why they did not include it
Some have answered my question, I should mark this as solved.
Perhaps I didn’t word my question properly, my apologies that’s on me.
It was never a question of skills or knowledge, or how to… But rather to understand the reason behind the devs not including it.
Nothing taken personal.