From mboxrd@z Thu Jan 1 00:00:00 1970 From: Chris Marusich Subject: Re: Encrypted root partition Date: Wed, 23 Nov 2016 22:45:39 -0800 Message-ID: <87a8cp4bqk.fsf@gmail.com> References: <87vavd3k1t.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:36780) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1c9nn1-0003JS-B3 for guix-devel@gnu.org; Thu, 24 Nov 2016 01:45:48 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1c9nn0-0006Ii-3F for guix-devel@gnu.org; Thu, 24 Nov 2016 01:45:47 -0500 List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable ludo@gnu.org (Ludovic Court=C3=A8s) writes: > Hello Guix! > > In case you missed it, GuixSD now supports LUKS-encrypted root > partitions, finally! > > https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D21843#48 > > And there=E2=80=99s a system test, which can also serve as an example for= people > who want to test it: > > http://git.savannah.gnu.org/cgit/guix.git/tree/gnu/tests/install.scm#n3= 92 > > The test is pretty fun because it resorts to OCR on QEMU screenshots to > determine when it can enter the passphrase (when booting the installed > system). > > http://git.savannah.gnu.org/cgit/guix.git/tree/gnu/tests/install.scm#n4= 56 > http://git.savannah.gnu.org/cgit/guix.git/tree/gnu/build/marionette.scm= #n177 > > It should turn green on Hydra when it gets to run it: > > https://hydra.gnu.org/job/gnu/master/test.encrypted-root-os.x86_64-linux > > In the meantime, you can always run: > > make check-system TESTS=3Dencrypted-root-os > > Now we need documentation. Petter had submitted a patch back in > February(!) so I guess I=E2=80=99ll start from there and see if any adjus= tments > need to be made. > > Feedback welcome! > > Ludo=E2=80=99. Wow! This is super cool! Using OCR is a neat idea. It looks simpler to implement than I would have imagined it might be. Thank you for continuing to pave the way for system tests. Is anyone actively working on documenting the new encrypted root stuff? If not, I'm happy to try my hand at it. I'm interested in trying to set it up on my laptop, anyway. =2D-=20 Chris --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYNoyTAAoJEN1AmhXYIkad7XMQAKALv78ab+Rhr1T41II/X+R/ lqWbsPZWlh/dXzvJc8EFbGVO5WK3GETiOWcyR50I+Xs24gwu2oHsN/HHwTmpa53M 0kUPqwA++hUhlM1Nk3szwbTRzznI23KaRkyXF3rWHv+eKGEA2G7WkS5EWwIUA1/4 SrDLGvjBttl8l/MSKP7j7HJB7f8/U9FuctHzLelymzk8RuNH+XLl6ju8zqMm4RnQ p74LiXLlWSerEYzJRpzG5dnKgt1WajkIN/4H/AL7B+uzBeWnUa1FlRSJWgtp9PMO r9dWkPOTrKydECq/2Hcfbs24fUVvDGpu6hiFbbrcoRPFJ8lki9Alv/PM2osCOvnv abhvcIeKp0Tub0cQCHcBNt1DFvL0vHgzvqqMbZRUqVa5m8PYnFp9iEPo56EFn82M QRVuB+6CigSHlf1THvKaEQfG48CZyhLbxfrGrjFLKLBcv1Pd5AsF/zL+aVzLBlVM zEYmu4ySvw+Y+7AOuhpD5vu6jRogqdFHEeIn+fLvhdvDNuXJvyiwDeVVGga3ELBH 912nWVd2pPgwfI+Et5IkMXs6jGgTdBIjnR3OstSqj/ks/VIFEeb7XgNEnBpRPQrD T0Bwa2Vwwf5JukC4gRXquNRh5MK6oxA5iL4bED35z8RTXyfLdNObJhjjrbD+tKzV AjDMX+UCNggStA/v+Ejo =wt8g -----END PGP SIGNATURE----- --=-=-=--