If the swap file is encrypted and memory encryption is turned on, I don't see why lockdown shouldn't be allowed.
You're already relying on the hardware platform for Secure Boot, it's not far fetched to apply the same view to hibernate if the platform protects memory and disk.
That said, S3 is still a viable option, and IMO, the best option. Some hardware vendors still implement S3 sleep for their Linux laptops.
You're already relying on the hardware platform for Secure Boot, it's not far fetched to apply the same view to hibernate if the platform protects memory and disk.
That said, S3 is still a viable option, and IMO, the best option. Some hardware vendors still implement S3 sleep for their Linux laptops.