xss-lock -- i3lock -n -c 000000
exec --no-startup-id xss-lock -- i3lock -n -c 000000
That, however, is not the recommended procedure to ensure screen is locked on suspend, because the call to xss-lock is missing the argument --transfer-sleep-lock to xss-lock. See the help of i3wm itself: https://github.com/i3/i3lock?tab=readme-ov-file#running-i3lock and additional discussion here i3/i3lock#207 (argument "-l" and "--transfer-sleep-lock" are the same).
In https://guidebook.civicactions.com/en/latest/common-practices-tools/security/securing-your-workspace/
you suggest
That, however, is not the recommended procedure to ensure screen is locked on suspend, because the call to xss-lock is missing the argument
--transfer-sleep-locktoxss-lock. See the help of i3wm itself: https://github.com/i3/i3lock?tab=readme-ov-file#running-i3lock and additional discussion here i3/i3lock#207 (argument "-l" and "--transfer-sleep-lock" are the same).