qubes-issues icon indicating copy to clipboard operation
qubes-issues copied to clipboard

Enable Trim by default (Or provide installation option) for SSD drives

Open t4777sd opened this issue 6 years ago • 4 comments

Qubes OS version:

Q 4.0

Expected behavior:

Trim is enabled if the user is using SSD or at least installation option is presented

Actual behavior:

User must enable trim through a cumbersome manual process outlined here: https://www.qubes-os.org/doc/disk-trim/

General notes:

I think most users in 2018 expect that trim is enabled by default. Almost all users of Qubes utilize an SSD so this affects almost every user I imagine.

I have been running Qubes for quite some time assuming it trimmed. So, at a minimum a big warning during installation should be made that Trim will not be done on the SSD unless manual action is taken post-installation. Not trimming is against user expectations in the current year I think.

Trim is far more secure than not using trim. Without Trim the machine is far more vulnerable to forensics. As a result it should be enabled by default to prevent forensics.

t4777sd avatar Nov 26 '18 22:11 t4777sd

Related to (possible duplicate of?): #3226

andrewdavidwong avatar Nov 27 '18 05:11 andrewdavidwong

Even more likely duplicate of #3686. Please have a look at the discussion there concerning the security considerations.

andrewdavidwong avatar Nov 27 '18 05:11 andrewdavidwong

My head hurts after reading all of the linked discussions; how the heck does this even apply to a btrfs Qubes install?

ideologysec avatar Jan 21 '19 22:01 ideologysec

My head hurts after reading all of the linked discussions; how the heck does this even apply to a btrfs Qubes install?

You're the first to mention btrfs on this issue, so perhaps the first question is: How does btrfs apply here?

andrewdavidwong avatar Jan 22 '19 03:01 andrewdavidwong