unofficial mirror of bug-guix@gnu.org 
 help / color / mirror / Atom feed
From: "Ludovic Courtès" <ludo@gnu.org>
To: Danny Milosavljevic <dannym@scratchpost.org>
Cc: 25305@debbugs.gnu.org, Jonathan Brielmaier <jonathan.brielmaier@web.de>
Subject: bug#25305: LUKS-encrypted root and unencrypted /boot with GuixSD 0.12.0
Date: Wed, 18 Nov 2020 18:46:49 +0100
Message-ID: <871rgqmuba.fsf@gnu.org> (raw)
In-Reply-To: <20201118175421.185045c7@scratchpost.org> (Danny Milosavljevic's message of "Wed, 18 Nov 2020 17:54:21 +0100")

Hi,

Danny Milosavljevic <dannym@scratchpost.org> skribis:

> (It measures /boot in order to find out whether it has been tampered with or
> not)

(Off-topic.) I’d be curious to see how much of this approach makes sense
in the context of immutable deployments like Guix does.

Ludo’.




      reply	other threads:[~2020-11-18 17:49 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <CAOXwz5_i2-dUVeFgNfXt07zazCq1SLz6V+WGC09JLRYzUgUDRA@mail.gmail.com>
2016-12-30 23:52 ` Ludovic Courtès
2020-11-16 17:56   ` bug#25305: " Jonathan Brielmaier
2020-11-18 16:54     ` Danny Milosavljevic
2020-11-18 17:46       ` Ludovic Courtès [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://guix.gnu.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=871rgqmuba.fsf@gnu.org \
    --to=ludo@gnu.org \
    --cc=25305@debbugs.gnu.org \
    --cc=dannym@scratchpost.org \
    --cc=jonathan.brielmaier@web.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

unofficial mirror of bug-guix@gnu.org 

This inbox may be cloned and mirrored by anyone:

	git clone --mirror https://yhetil.org/guix-bugs/0 guix-bugs/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 guix-bugs guix-bugs/ https://yhetil.org/guix-bugs \
		bug-guix@gnu.org
	public-inbox-index guix-bugs

Example config snippet for mirrors.
Newsgroups are available over NNTP:
	nntp://news.yhetil.org/yhetil.gnu.guix.bugs
	nntp://news.gmane.io/gmane.comp.gnu.guix.bugs


AGPL code for this site: git clone http://ou63pmih66umazou.onion/public-inbox.git