From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= Subject: Re: Unencrypted boot with encrypted root Date: Tue, 07 Apr 2020 22:19:00 +0200 Message-ID: <87369f82x7.fsf@gnu.org> References: <87ftdmi7pp.fsf@ambrevar.xyz> <17c316adc8485d1f09f70d291cfaad50258c6c1f.camel@wine-logistix.de> <20200403194423.m3pvz654qslug7g3@pelzflorian.localdomain> <20200404101832.cmegsybfyrseazjq@pelzflorian.localdomain> <4610a9147fa041ebb47f184a2d3f7878a8a2539c.camel@wine-logistix.de> <87d08jbpcc.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:56605) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jLuga-0006si-Sa for guix-devel@gnu.org; Tue, 07 Apr 2020 16:19:05 -0400 In-Reply-To: (Ellen Papsch's message of "Tue, 07 Apr 2020 13:34:24 +0200") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane-mx.org@gnu.org Sender: "Guix-devel" To: Ellen Papsch Cc: guix-devel@gnu.org Ellen Papsch skribis: > Does it have to go through the store? I imagine key generation would be > done by the installer, not guix system init. Sure, but what happens when you reconfigure? You still need to have that file around so it can be added to the initrd. Ludo=E2=80=99.