From mboxrd@z Thu Jan 1 00:00:00 1970 From: Chris Marusich Subject: Re: Encrypted root partition Date: Thu, 19 Jan 2017 21:37:53 -0800 Message-ID: <8737geuw9a.fsf@gmail.com> References: <87vavd3k1t.fsf@gnu.org> <87a8cp4bqk.fsf@gmail.com> <877f7swllv.fsf@gnu.org> <87pojkitaf.fsf@gmail.com> <87eg0083vx.fsf@gnu.org> <87y3y7vfhn.fsf@gmail.com> <87bmv3z207.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58182) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cURth-0006OR-Nb for guix-devel@gnu.org; Fri, 20 Jan 2017 00:38:02 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cURte-0004Z5-IF for guix-devel@gnu.org; Fri, 20 Jan 2017 00:38:01 -0500 In-Reply-To: <87bmv3z207.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Thu, 19 Jan 2017 13:07:52 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable ludo@gnu.org (Ludovic Court=C3=A8s) writes: > Chris Marusich skribis: > >> ludo@gnu.org (Ludovic Court=C3=A8s) writes: >> >>> Chris Marusich skribis: >>> >>>> ludo@gnu.org (Ludovic Court=C3=A8s) writes: >>>> >>>>> Chris Marusich skribis: >>>>> >>>>>> Is anyone actively working on documenting the new encrypted root stu= ff? >>>>>> If not, I'm happy to try my hand at it. I'm interested in trying to= set >>>>>> it up on my laptop, anyway. >>>>> >>>>> I=E2=80=99ve added documentation in 2b5fea5ba3b07999cf198e1132ffcacbf= cb7ed72. >>>>> >>>>> Please send a patch if you think of improvements that can be made. >>>> >>>> I'm happy to report that I was successful in setting up an encrypted >>>> root file system on my Libreboot laptop. I have to enter the passphra= se >>>> twice, but that's no different from the normal case (without Libreboot= ). >>>> It took me multiple days to get it working, though, because each time I >>>> tried to run "guix system init", it took over 8 hours to finish! >>> >>> Woow, was it building stuff, or was downloading super slow? Was is a >>> desktop-style install? >> >> It was a desktop-style install. Many packages were built from source, >> even though some were downloaded via substitutes, also. It was >> particularly painful because I didn't know how to save and re-use the >> result of the first build attempt, so I'm sure I wasted a lot of time >> starting over and rebuilding the same packages a second time. > > There=E2=80=99s currently no option to resume an install unfortunately. > > I=E2=80=99m surprised though. 0.12.0 binaries are still available on > hydra.gnu.org AFAIK, or at least we (i.e., Mark) took the appropriate > measures to protect them from garbage collection. > > I guess I should try a desktop install and see which substitutes are > missing. It's probably because I ran 'guix pull' before installing. Maybe I shouldn't have done that! =2D-=20 Chris --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEy/WXVcvn5+/vGD+x3UCaFdgiRp0FAliBojEACgkQ3UCaFdgi Rp1lUBAAk7xz+SWjjB5Z+UbPZcixd7pXx7bZJRbOZyJqP/Uadqx+KNKt2+ZT+w1E NwlC14dquDqW3qCa42VPSUK1Ifndlr1lw6zNLbITewhdhOAva5ZC5tsf4oEbzMPf Cn3kGMuPlarliNURkrv0/dqa3o05MUw3ahqTpTMUCJ+t9VglYLH5rD9znRnwT55K 5MlgQPYxob0t7T3eeg9J9t0PVIqTju+JCgCnAFtD1pYy1rbJ8vxddr4SIEqdGiZV RRY4QdulEkhU/RFvR4E/kwpruNl9Kig17rCbBGQG3l7thC1Xb+xMuAwDbFZ3Dt/s 18PFLJrzE00skUvdPku4rSGf29u+dp2GfSu+7hnll/y3r6Mavb5pZyW0UF2KeJdQ +r1uF3ojDY1+YU4UcI+gdPEh2O5gItH72JzQgtj6wk9g88o5civIqM1O/kJrWCzr eihcLMONaOAHZywLIF/FGwsQU99HSJvZ6nqimorzfH13/geeAWykNbNDUVahesXl Mkbl93L2zMmyn3Zd4lDHQcW9mVRv/qnIXuJMudlxjBOs9sRc+ixfmQIEQ2k4XmCp NOJlL28cqt+z75FHYfYV44nx+ZHA2SIedTTg7w1eIXAYkTXjJPjgBq6ypaOFpiTE zIxcp3cmGcguyErl1tQs7wPRkNC/7n1ef2a9RjGc80zfg16VUq4= =Z8eH -----END PGP SIGNATURE----- --=-=-=--