Ubuntu 23.10’s desktop downloads are available again after an installer-translation incident interrupted the October 12 launch. Alongside a new App Center, the release introduces experimental hardware-backed disk encryption whose requirements reach deeper than a checkbox in the installer.
Canonical restored the affected downloads on October 16 after auditing installer translations. A malicious contributor had inserted offensive Ukrainian text through a third-party translation service. Canonical said its initial investigation found the text in the live installer, without propagation to installed systems. Upgrades weren’t affected, and the legacy desktop image remained available.
Official Ubuntu logo from Canonical’s brand resources, used for editorial commentary under its IP rights policy. Source artwork is unchanged apart from proportional rasterization and white padding. Ubuntu and its logo are trademarks of Canonical Ltd. Sulat isn’t affiliated with Canonical or speaking on its behalf.
The store and the boot chain use snaps differently
The Flutter-based App Center manages both snap and deb packages. Firmware updates move into a separate application. Canonical says that avoids keeping the old Ubuntu Software application running in the background just to check firmware.
The encryption preview gives snap packaging a different job. Its kernel and boot components are delivered as snaps, with Snapd managing the encryption lifecycle. Canonical’s technical explanation says the rest of userspace remains classic Ubuntu. Using this installation option doesn’t turn the desktop into an Ubuntu Core system.
That separation matters for hardware compatibility. The October launch documentation says the preview requires the generic Ubuntu kernel snap and doesn’t support additional drivers such as NVIDIA’s. Canonical describes the option as experimental and cautions that testing should use hardware users are prepared to wipe. Conventional passphrase-based full-disk encryption remains available.
Trust depends on what boots
The TPM-backed option can unlock the disk automatically when the expected boot software runs. Its protection therefore depends on the boot chain, rather than simply on a machine having a security chip.
Canonical’s technical description is more specific than the release announcement’s shorthand about keys being stored in the TPM: the disk key is stored outside the TPM as a sealed object, protected by its storage hierarchy. The unlocking policy incorporates boot components and configuration, including the kernel command line. A signed unified kernel image combines the kernel and its initial RAM filesystem, or initramfs.
Those details connect the packaging restriction to the security design. Managing the kernel and boot assets together helps maintain the chain that authorizes unlocking. The preview isn’t evidence that every existing Ubuntu installation or third-party driver configuration can adopt that arrangement.
A short support window, with upgrades still being offered
The release team promises nine months of maintenance. Its October 16 announcement says Ubuntu 23.04 users will shortly be offered automatic upgrades, rather than confirming that every installation already has an upgrade prompt.
Discover more from Sulat AI & Tech News
Subscribe to get the latest posts sent to your email.
