[cel1ne]

I find it curious that you care about boot-times. I use macbooks and just close and reopen the lid. Waking from this sleep takes less than a second usually.

My average uptime is about 22 days until I reboot for an update or something.

I used Linux for years, and I understood that in 2008 sleep/resume on notebooks didn't properly work, but now we have 2017 - 9 years later!

[aiur3la]

I don't really care about boot times, but as a tech guy 23 seconds sounds like an error to me and I want to find it and fix it :)

Also, old laptops with dieing batteries (or new ones with always-on sensors such as fingerprint readers) have some leakage during sleep so it may be better to turn them off if you are not going to use them for a few days.

edit: resume/suspend in linux works just fine and has done so for many years (in response to eltoozero)

[karussell]

I have disabled the UEFI Network Stack (updated the article to reflect this) and now the BIOS boot time is down to ~2seconds :) !

[eltoozero]

Mac is my daily driver for this very reason, I'm a consultant and I need to frequently grab and go.

I've had Linux on mobile for ages and have yet to have reliable sleep/wake behavior on a dozen machines over the years.

Sleep on Linux works reliably if you run it inside a Mac VM though, FWIW! ;)

[karussell]

Important difference: sleep usually works and is fast. What often does not work is hibernation (recover from disc)

[cel1ne]

...which is crucial since you don't want to lose your data when closing the lid. (Non-tech-term is on purpose here, since users shouldn't need to know about the difference. Also I believe OSX uses a hybrid approach).

[karussell]

You do not loose your data with both methods as power is used for suspend to RAM.

BTW: OSX has not a "pure" suspend to disc anymore and the default method is suspend to RAM when closing the lid

[cel1ne]

Parent poster stated "What often does not work is hibernation (recover from disc)".

Which means the user loses data.

[karussell]

Parent poster was me and you do not loose data. Instead it just does not go into hibernation in my case :)

[pmontra]

According to a comment in the post it fails when the swap partition is encrypted. However why enable swap with 16 GB of RAM? I've been running without swap for almost 3 years and never had any trouble. If I start approaching the limit I'll buy another 16 GB.

[karussell]

The comment also talks about suspend to disc.

[pmontra]

Exactly, the comment in your blog is "suspension to disk does not work if your swap partition is encrypted. This is due to how Ubuntu encrypts your home (ecryptfs) but not due to Linux itself."

I was reporting that.

[keithpeter]

I use whole drive encryption to protect data in the event I leave my old X220 (Fedora) on the bus.

I don't mind boot times in the 20s range (X220/Fedora/cheapo SSD) too much, but I do need to close down/reboot a couple of times a day otherwise no point in encryption.

[blakeyrat]

> but I do need to close down/reboot a couple of times a day otherwise no point in encryption.

Given, I'm not a Linux user, but I don't understand this at all.

On Windows, encrypted is encrypted-- the lock screen is exactly as secure as the login screen. Are you saying that in Linux the lock screen is easily-bypassed? So you have to keep your computer logged-out when you're in a place it might get stolen?

[criddell]

> On Windows, encrypted is encrypted

Wasn't there a recent story about how Windows is storing keys so that it can wake up in the middle of the night and apply updates? I thought that the conclusion was that locked isn't as secure as logged out.

[keithpeter]

I believe that would be 'encrypt my home drive' on Linux, then you basically log out to protect files. Not sure though.

[blakeyrat]

What I'm not understanding is why logging out or rebooting is required to keep a computer with full disk encryption secure. That's certainly not the case on competing OSes like Windows.

[tlikonen]

Usually in Linux the system is installed on an encrypted filesystem (cryptsetup, LUKS). Only kernel and so called initrd image (early boot stuff) is outside the encryption. The disk is opened at very early stage in boot when just about the kernel is loaded. Thus, the encryption is open whenever the operating system is running. Everything is of course still transparently encrypted on disk but the "lock" is open. One must shut down the computer to close the filesystem's encryption.

[keithpeter]

"Then click Install Now, and follow the rest of the instructions until you get to the “Who are you?” page. Make sure to choose a strong password — if someone steals your laptop while it’s suspended, this password is all that comes between the attacker and your data. And make sure that “Require my password to log in” is checked, and that “Log in automatically” is not checked. There is no reason to check “Encrypt my home folder” here, because you’re already encrypting your entire disk."

Above quote is from the section titled 'How to encrypt your disk in Linux' on the page at

https://theintercept.com/2015/04/27/encrypting-laptop-like-m...

I'm just a bit confused about how Windows can remove keys without messing up file handles &c when suspending to RAM.

The level of security I have now is adequate to my purpose but certainly something for others to take into consideration. Thanks for posting.