OEM lock for desktop

[dngray (Daniel Gray)]

That second link is quite old.

There’s a systemd component called systemd-cryptenroll that can do this mentioned here: Guide to using LUKS with TPM? - #3 by dngray

There isn’t a lot of benefit, and I’d honestly wait until systemd-measure and ukify are mainstream in your distribution.

@Tziyoni

BTW, what’s cosmic and why is it so important.

We have some discussion about Wayland mentioned here. COSMIC will support Wayland whereas their current setup doesn’t use this by default.