[the_french]

On some fronts it even feels like things have regressed. Trying to resize an encrypted partition is way, way too difficult. And it seems like GParted doesn't handle LUKS so you're back to manually typing block offsets on the command line.

If you wanted to use a TPM to store the FDE passphrase, well, you have the patience of a saint. Compare this to Mac or Windows where you click a single button and it's all setup, including TPM!

As much as I love linux for server environments, it remains a failure when it comes to modern desktop environments.

[spideymans]

>As much as I love linux for server environments, it remains a failure when it comes to modern desktop environments.

On top of what you mentioned, software distribution on Linux is still a nightmare for normal users. Yea apt-get is great for us nerds, but Bob the Accountant has no desire to use a CLI. Linux will not be viable on the modern desktop until the user never has to see a CLI.

[anthk]

Get OpenBSD. FDE is dumb easy. I am not kidding.

[the_french]

from the cursory read of the documentation on the openbsd site it doesn't seem to support TPMs. Setting up the encryption of a disk paritition does seem easier though.