Re: Encrypted root partition

[Chris Marusich <cmmarusich@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 2002 bytes --]

ludo@gnu.org (Ludovic Courtès) writes:

> Chris Marusich <cmmarusich@gmail.com> skribis:
>
>> ludo@gnu.org (Ludovic Courtès) writes:
>>
>>> Chris Marusich <cmmarusich@gmail.com> skribis:
>>>
>>>> ludo@gnu.org (Ludovic Courtès) writes:
>>>>
>>>>> Chris Marusich <cmmarusich@gmail.com> skribis:
>>>>>
>>>>>> Is anyone actively working on documenting the new encrypted root stuff?
>>>>>> If not, I'm happy to try my hand at it.  I'm interested in trying to set
>>>>>> it up on my laptop, anyway.
>>>>>
>>>>> I’ve added documentation in 2b5fea5ba3b07999cf198e1132ffcacbfcb7ed72.
>>>>>
>>>>> Please send a patch if you think of improvements that can be made.
>>>>
>>>> I'm happy to report that I was successful in setting up an encrypted
>>>> root file system on my Libreboot laptop.  I have to enter the passphrase
>>>> twice, but that's no different from the normal case (without Libreboot).
>>>> It took me multiple days to get it working, though, because each time I
>>>> tried to run "guix system init", it took over 8 hours to finish!
>>>
>>> Woow, was it building stuff, or was downloading super slow?  Was is a
>>> desktop-style install?
>>
>> It was a desktop-style install.  Many packages were built from source,
>> even though some were downloaded via substitutes, also.  It was
>> particularly painful because I didn't know how to save and re-use the
>> result of the first build attempt, so I'm sure I wasted a lot of time
>> starting over and rebuilding the same packages a second time.
>
> There’s currently no option to resume an install unfortunately.
>
> I’m surprised though.  0.12.0 binaries are still available on
> hydra.gnu.org AFAIK, or at least we (i.e., Mark) took the appropriate
> measures to protect them from garbage collection.
>
> I guess I should try a desktop install and see which substitutes are
> missing.

It's probably because I ran 'guix pull' before installing.  Maybe I
shouldn't have done that!

-- 
Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]