Re: LVM v. LUKS …

Re: LVM v. LUKS …

[Braswell Business Communications Services Inc.]

Hello Felix,

The system configuration file /etc/config.scm is basically identical to the stock / automatic config on the ISO installer. Nothing substantive gets changed at install - in fact I’d be using the full auto install if I didn’t require the LVM for the system to read the other drive. The only exceptions are minor user name change. The LVM array config, I would think, is irrelevant. 

(?)Maybe if this has indeed been patched, I could update my installer media (currently 1.4.0 on an x86_64 machine)?

I had been thinking about nesting it in a VM config instead of barebones as a possible workaround, but in the original replies to my query it seems I should expect the same problem with that for the same reasons.

Upon doublechecking in the GUI installer for usable residual partitioning left over from my manual attempts, in the guided / automatic GUI installation, for both encryption and non-encryption options, I do now indeed see both the 60GiB SSD and the 4TB drives as options, but I can’t blend/chain them together of course - it’s either one or the other for root targeting. Then there is the third, “manual” partitioning option in the GUI installer, but that particular process addresses only the SSD.

Apologies for the late reply, this project needed to wait for the commencement of summer break!
~Braswell 

> 
> On May 22, 2024, at 08:48, help-guix-request@gnu.org wrote:
> 
> Send Help-Guix mailing list submissions to
>    help-guix@gnu.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>    https://lists.gnu.org/mailman/listinfo/help-guix
> or, via email, send a message with subject or body 'help' to
>    help-guix-request@gnu.org
> 
> You can reach the person managing the list at
>    help-guix-owner@gnu.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Help-Guix digest..."
> 
> 
> Today's Topics:
> 
>   1. Re: LVM v. LUKS @ manual partitioning (Felix Lechner)
>   2. Re: Unable to access any web pages under https://guix.gnu.org
>      (Felix Lechner)
>   3. Guix system image record with a large root partition (bdunahu)
>   4. Re: LVM v. LUKS @ manual partitioning (Yann Dupont)
>   5. Re: LVM v. LUKS @ manual partitioning (Yann Dupont)
>   6. Virtualisation alternatives for deploying a small number of
>      services (Fabio Natali)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Tue, 21 May 2024 22:16:00 -0700
> From: Felix Lechner <felix.lechner@lease-up.com>
> To: "Braswell Business Communications Services Inc."
>    <chris.braswell@fusepowder.com>, help-guix@gnu.org
> Subject: Re: LVM v. LUKS @ manual partitioning
> Message-ID: <87ed9utoj3.fsf@lease-up.com>
> Content-Type: text/plain
> 
> Hi C.G.,
> 
>> On Sun, May 19 2024, Braswell Business Communications Services Inc. wrote:
>> 
>> After configuring the LVM to my needs, I then cannot mount the target
>> root file system
> 
> I use LVM2 a lot but have not used LUKS2.  (Guix may not support all
> LUKS2 key types.)  Will you please post your system configuration?
> 
> Kind regards
> Felix
> 
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Tue, 21 May 2024 22:22:29 -0700
> From: Felix Lechner <felix.lechner@lease-up.com>
> To: Ashvith Shetty <ashvithshetty10@gmail.com>, help-guix@gnu.org
> Subject: Re: Unable to access any web pages under https://guix.gnu.org
> Message-ID: <87bk4yto8a.fsf@lease-up.com>
> Content-Type: text/plain
> 
> Hi Ashvith,
> 
>> On Sun, May 19 2024, Ashvith Shetty wrote:
>> 
>> I do not have access to the manual page on the web anymore. How can I
>> get access to these manuals once again?
> 
> The manuals are probably on your hard drive. Please use C-h R in Emacs
> or use your favorite stand-alone info reader.
> 
> Expert tip:  Use 'i' to search the index.
> 
>> https://bordeaux.guix.gnu.org, which was the fastest and also, the
>> primary mirror for my use, has completely stopped working for me.
> 
> We have some temporary service issues, which are detailed here:
> 
>    https://lists.gnu.org/archive/html/info-guix/2024-05/msg00000.html
> 
> Thanks for using Guix!
> 
> Kind regards
> Felix
> 
> 
> 
> ------------------------------
> 
> Message: 3
> Date: Tue, 21 May 2024 22:55:01 -0600
> From: bdunahu <bdunahu@operationnull.com>
> To: help-guix@gnu.org
> Subject: Guix system image record with a large root partition
> Message-ID: <87ttiqo38a.fsf@operationnull.com>
> Content-Type: text/plain
> 
> Hello!
> 
> I would like to create a Guix System bootable from a USB. I am trying to
> configure an image record that will allow me to create this image with a
> large enough root partition (my USB is 32GB) that I can also instantiate
> my home configuration on it, whether manually or programatically later.
> 
> I have tried two different ways of creating an image with a large
> root partition, but am having difficulty with both:
> 
> (define system
>  (operating-system
>   ...)) ;; simplified
> 
> (define MiB (expt 2 20))
> (define GiB (expt 2 30))
> 
> (image
> (format 'disk-image)
> (operating-system system)
> (partitions
>  (list
>   (partition
>    (size (* 40 MiB))
>    (offset (* 1024 1024))
>    (label "GNU-ESP")
>    (file-system "vfat")
>    (flags '(esp))
>    (initializer (gexp initialize-efi-partition)))
>   (partition
>    (size (* 28 GiB))
>    (label root-label)
>    (file-system "ext4")
>    (flags '(boot))
>    (initializer (gexp initialize-root-partition))))))
> 
> ;; the above image declaraction is in kvasir.scm
> $ guix system -L ~/.config/guix/modules/ image ~/.config/guix/kvasir.scm
> 
> This generates correctly sized and offset partitions, but unfortunately
> results in a broken grub configuration. The program packages are there,
> but the /root directory is missing as well; so is my user (all part of the
> shared 'system' declaration I use to configure the computer I write this
> on) and the guixbuild user group...
> 
> I then tried to use a different image format (iso9660), which I based off of
> the existing iso9660-image included in the existing images module (so
> the same as the above but no ESP partition):
> 
> (image
> (format 'iso9660)
> (operating-system system)
> (partitions
>  (list
>   (partition
>    (size (* 28 GiB))
>    (label root-label)
>    (file-system "ext4")
>    (flags '(boot))
>    (initializer (gexp initialize-root-partition))))))
> 
> 
> This creates a full, working configuration, but also ignores my size and
> offset specifications (the root partition is ~2GiB, and starts at block
> 0). I have tried to resize the partition manually using fdisk, but
> because the boot partition starts after the root partition, this also
> seems impossible (and more of a duct-tape solution).
> 
> 
> So I am not sure how to get the image I want. If anyone were able to
> help me fix my image record (or better solutions, or even a suggestion
> as to why mine doesn't work) to generate a simple image that works on
> most modern computers and has a large root partition, it would be very
> helpful to me.
> 
> Thanks!
> bd
> 
> 
> 
> ------------------------------
> 
> Message: 4
> Date: Wed, 22 May 2024 10:12:47 +0200
> From: Yann Dupont <Yann.Dupont@univ-nantes.fr>
> To: help-guix@gnu.org
> Subject: Re: LVM v. LUKS @ manual partitioning
> Message-ID: <af1bbddd-9fe7-16c6-1a28-1673e8ea84bf@univ-nantes.fr>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
> 
> 
>> On 22/05/2024 07:16, Felix Lechner via wrote:
>> Hi C.G.,
>> 
>>> On Sun, May 19 2024, Braswell Business Communications Services Inc. wrote:
>>> 
>>> After configuring the LVM to my needs, I then cannot mount the target
>>> root file system
>> I use LVM2 a lot but have not used LUKS2.  (Guix may not support all
>> LUKS2 key types.)  Will you please post your system configuration?
>> 
>> Kind regards
>> Felix
>> 
> Hi all, for me LVM2 activation is broken on VM or bare metal, see
> https://issues.guix.gnu.org/66586
> 
> @Felix, are you using LVM2 in this case ?
> 
> Regards,
> 
> --
> Yann Dupont - GLiCID / HPC Pays de la Loire
> Tel : 02.53.48.49.39 - Mail/Jabber : Yann.Dupont@univ-nantes.fr
> 
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: smime.p7s
> Type: application/pkcs7-signature
> Size: 2339 bytes
> Desc: S/MIME Cryptographic Signature
> URL: <https://lists.gnu.org/archive/html/help-guix/attachments/20240522/56ed3ded/attachment.bin>
> 
> ------------------------------
> 
> Message: 5
> Date: Wed, 22 May 2024 10:23:06 +0200
> From: Yann Dupont <Yann.Dupont@univ-nantes.fr>
> To: help-guix@gnu.org
> Subject: Re: LVM v. LUKS @ manual partitioning
> Message-ID: <761ae532-88e5-824f-dc4c-383ce1f8d489@univ-nantes.fr>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
> 
> 
>> On 22/05/2024 07:16, Felix Lechner via wrote:
>> Hi C.G.,
>> 
>>> On Sun, May 19 2024, Braswell Business Communications Services Inc. wrote:
>>> 
>>> After configuring the LVM to my needs, I then cannot mount the target
>>> root file system
>> I use LVM2 a lot but have not used LUKS2. (Guix may not support all
>> LUKS2 key types.) Will you please post your system configuration?
>> 
>> Kind regards
>> Felix
>> 
> Hi all, for me LVM2 activation is broken on VM or bare metal, see
> https://issues.guix.gnu.org/66586
> 
> @Felix, are you using LVM2 in this case ?
> 
> Regards,
> 
> --
> Yann Dupont - GLiCID / HPC Pays de la Loire
> Tel : 02.53.48.49.39 - Mail/Jabber : Yann.Dupont@univ-nantes.fr
> 
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: smime.p7s
> Type: application/pkcs7-signature
> Size: 2339 bytes
> Desc: S/MIME Cryptographic Signature
> URL: <https://lists.gnu.org/archive/html/help-guix/attachments/20240522/851aaa68/attachment.bin>
> 
> ------------------------------
> 
> Message: 6
> Date: Wed, 22 May 2024 16:47:51 +0100
> From: Fabio Natali <me@fabionatali.com>
> To: help-guix@gnu.org
> Subject: Virtualisation alternatives for deploying a small number of
>    services
> Message-ID: <875xv5voew.fsf@fabionatali.com>
> Content-Type: text/plain
> 
> Hi,
> 
> I'd like to run a small number of VMs on a single physical machine. The
> reason for using VMs is security, i.e. to get a strong level of
> isolation when deploying some services.
> 
> Among the options I've been considering:
> 
> + libvirt, which I understand would imply some manual (potentially non
>  declarative?) setup, beyond defining and bringing up the libvirt Guix
>  service.
> + Ganeti, which might be a bit of an overkill for this particular use
>  case.
> + Guix's 'least-authority-wrapper', which of course would give me
>  containerisation rather than virtualisation, so not really what I'm
>  looking for.
> 
> I think libvirt is my favourite option so far but I was wondering if
> there's any further alternative that I haven't been considering.
> 
> I think the ideal solution would be some wrapper similar to the
> least-authority one, but that spins up a VM rather than a container. I
> see there's 'virtual-build-machine-service-type' which of course
> wouldn't fit the bill, but it might be close to the idea of a VM-based
> wrapper?
> 
> Any ideas or pointers to existing solution are welcome.
> 
> Thanks, best, Fabio.
> 
> (I'd be grateful if you could CC me in if replying as otherwise I might
> miss your email.)
> 
> 
> --
> Fabio Natali
> https://fabionatali.com
> 
> 
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> _______________________________________________
> Help-Guix mailing list
> Help-Guix@gnu.org
> https://lists.gnu.org/mailman/listinfo/help-guix
> 
> 
> ------------------------------
> 
> End of Help-Guix Digest, Vol 102, Issue 36
> ******************************************
>