From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id kAiCIaQkp2bi8QAAe85BDQ:P1 (envelope-from ) for ; Mon, 29 Jul 2024 05:12:04 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id kAiCIaQkp2bi8QAAe85BDQ (envelope-from ) for ; Mon, 29 Jul 2024 07:12:04 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=h0WC3+Iq; dkim=fail ("headers rsa verify failed") header.d=rschanz.org header.s=dkim header.b=Q09EqAa5; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1722229924; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=+Px1yPYzMRFGBEYsVXoLRzRsNiIj23H+2KvwgPLa/74=; b=AwJJukjRv3ySigMMtnhS3PztAodvvZRiVVBAgiRR36lYb6yUDHVY+Ud5bpCQr7GiTMk1yO GXX63Seu3oZjK+3+eArxwCn00bVg59Gh+mT3SC9fk3CPFDQ47Kqe6unK1H7GWWP2PgxOLx dGHI/4RX1TIrZXV6Yhr6igy86hA74A7Pn9rzWNJx9xGCTTv4JsLpJOpF+hN+2jTSNMK7kp +hxq5cFX4q4twtoKCRSF4sYdt9XXWs9SSuJivixH7wvRsADkrCNzekzS6mRj/eQH5pHEdF FwhAcJnj8PveePJ/bhjK7/P80DDShFUZAriLM5gUiYU84PcrNIN50IAB6MPdAw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=h0WC3+Iq; dkim=fail ("headers rsa verify failed") header.d=rschanz.org header.s=dkim header.b=Q09EqAa5; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Seal: i=1; s=key1; d=yhetil.org; t=1722229924; a=rsa-sha256; cv=none; b=ivR9YbFXDwdCTa05M7137HHLAYLn5yUtW62Htc2KUtLWOG3XgDL/5IGKH0PMrFBRy4YF+2 MEfICqZsEDykAYhsd7yzJuiaYkjKT5TU+obcCUzmMQmNdcSrI3Qbc1fhByeOCeWMNvBnvh 1mOVOmi5kXVgatPEOwxF2P7a0nWSmepnNcOPj0P69gpx6+3+hkISuUQnvrSxHpnJIbN2hO BYJPLhz2V9El+9j+QV4e+Q8V0S2vAiKnM9gR/EPlRFOqTUWH76ROFasHV1dzFCJZ822mCf Ii21zRiV+JAay8Fqk0ocIBniDGcddJg3UlxMky9QaQDeaUcWB5IEak6iHE3MEg== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 618F176E61 for ; Mon, 29 Jul 2024 07:12:03 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sYIfl-00019t-C0; Mon, 29 Jul 2024 01:11:49 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sYIfk-00019j-K2 for guix-patches@gnu.org; Mon, 29 Jul 2024 01:11:48 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sYIfk-0008Ch-BT for guix-patches@gnu.org; Mon, 29 Jul 2024 01:11:48 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=From:Date:Mime-Version:To:In-Reply-To:References:Subject; bh=+Px1yPYzMRFGBEYsVXoLRzRsNiIj23H+2KvwgPLa/74=; b=h0WC3+IqE6OxowL7nLtb5NFEpdC8KhG7wJBKVBQZgLb5bcGrGlFrX9ehGu2Oud6Rmv1Yz4ZIHkDU4jijEkyO0up9cWFbNm/iLjaT8T6v4fgVBJWoacPFeNTPzmKC8v82oZlMmB8lRie0LWi93nZORLaOzMnG6YuviJBdil6A9UPnUbHQ4f5eWMJWFGCACVocWwq8IrzV5P89K7Fw7fWizbmbIqkzFzh+dYL9Ce8iUsJXbbAl6MNsFDucBgpzPEXk6WWvoQm2wa7Lo/CeHqvIvdVzG1/ZRMN+G+Q972OjZfVNvsdgw4UlgYbxgcnwWrF6noZu3hhMKWHdAgUMnKGkyA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1sYIfw-000853-Jy for guix-patches@gnu.org; Mon, 29 Jul 2024 01:12:00 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#68524] Fwd: [PATCH 0/2] Support root encryption and secure boot. References: In-Reply-To: Resent-From: "Ryan S" Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 29 Jul 2024 05:12:00 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 68524 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: <68524@debbugs.gnu.org> Received: via spool by 68524-submit@debbugs.gnu.org id=B68524.172222989130878 (code B ref 68524); Mon, 29 Jul 2024 05:12:00 +0000 Received: (at 68524) by debbugs.gnu.org; 29 Jul 2024 05:11:31 +0000 Received: from localhost ([127.0.0.1]:44750 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sYIfS-00081w-VI for submit@debbugs.gnu.org; Mon, 29 Jul 2024 01:11:31 -0400 Received: from mail.rschanz.org ([5.161.207.21]:35856) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sYIfQ-00081n-3g for 68524@debbugs.gnu.org; Mon, 29 Jul 2024 01:11:29 -0400 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 540BD271974 for <68524@debbugs.gnu.org>; Mon, 29 Jul 2024 01:11:15 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rschanz.org; s=dkim; t=1722229875; h=from:subject:date:message-id:to:mime-version:content-type: content-transfer-encoding; bh=+Px1yPYzMRFGBEYsVXoLRzRsNiIj23H+2KvwgPLa/74=; b=Q09EqAa5jeNJMtygv6KQL0oj+HPdQvB10/LCF/wlwg6DIPLzzoAHBh2vYc6hLqmC9sFfbl cL+9h2Lw916X1AE7m+Khb7RD5V1/EzV5SBBDBdkDUcosEyDmloume+kw6ZoLu6UrZWsG0J cL7c5PDwqEolMizJs2ZwgCEeBJ/q74aIBZ+m1ywVUOtOpy2fMdwn1rK09JDPKoNy2XgnmR 0LubYCe5PPE/jAmgVpSvoOIHXflUWnY7wGCiWSelI8uB2Ti4X9eV0QfbA736PAcdt6Dhru F1TJbP9UTsMuvMiI5z8XI9qE0GkfKFvqKwTAanKkrRzfvHWMb7c1rLaGhdW06Q== Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=UTF-8; format=Flowed Date: Mon, 29 Jul 2024 01:11:14 -0400 Message-Id: X-Mailer: aerc 0.17.0 X-Last-TLS-Session-Version: TLSv1.3 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Ryan S X-ACL-Warn: , Ryan S via Guix-patches From: Ryan S via Guix-patches via Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -6.42 X-Migadu-Queue-Id: 618F176E61 X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -6.42 X-TUID: OL78jYOyuSyw Hi all! No clue if this patch series is still being worked on, however I have been = keeping an eye on this (want to migrate away from GRUB because of decryptio= n speed and integrity reasons). Good news, I've successfully added these pa= tches on a local channel I have and everything still works, with little mod= ifications (this has been an on and off process over the past month or so b= ecause I've been busy, so my memory of changes made may be fuzzy). However,= I did notice a bug. When performing a fresh installation, the bootloader i= nstall will always fail since it assumes "/boot/efi" as the base "script-pa= th". This assumption is false due to the installer placing the system being= installed at "/mnt/boot/efi". Outside of that, is a new rewrite of the boot system still being worked on?= What kinds of things are we looking for to get UKIs merged? Should I start= /continue a thread on guix-devel? I'd like to help where I can. --=20 Best, Ryan