"Andrew M.A. Cater" <amaca...@einval.com> writes: > A quick search with a search engine: boot is restricted, not impossible. > > The answer seems to be to install with LVM and encryption. That ensures > that the swap area is encrypted and *cannot* be messed with while the > device is hibernated (which is the rationale for Secure Boot not allowing > hibernation to a "naked" swap partition). > > That answer came from Stack Exchange but the poster suggests this as > possible under (at least) Red Hat, SUSE and Debian.
If it was https://unix.stackexchange.com/questions/747938/how-can-linux-hibernation-be-enabled-under-uefi-secure-boot-with-kernel-lockdown it doesn't seem to me he suggests anything of the sort. Works (a little clunkily) for OpenSUSE but nothing is stated about anything else. However, high time to update Debian wiki if it is actually possible now. Hm, maybe it could work in Debian with OpenSUSE's kernel?