From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id qDYsJ50OJmCjdgAA0tVLHw (envelope-from ) for ; Fri, 12 Feb 2021 05:14:05 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id sIHdIp0OJmA3VwAAbx9fmQ (envelope-from ) for ; Fri, 12 Feb 2021 05:14:05 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 5FA6E9403D2 for ; Fri, 12 Feb 2021 05:14:02 +0000 (UTC) Received: from localhost ([::1]:52478 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lAQmH-0003gQ-6g for larch@yhetil.org; Fri, 12 Feb 2021 00:14:01 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:40260) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lAQm3-0003eN-U1 for help-guix@gnu.org; Fri, 12 Feb 2021 00:13:48 -0500 Received: from mx1.riseup.net ([198.252.153.129]:40374) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lAQm2-0001wI-1q for help-guix@gnu.org; Fri, 12 Feb 2021 00:13:47 -0500 Received: from fews1.riseup.net (fews1-pn.riseup.net [10.0.1.83]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.riseup.net", Issuer "Sectigo RSA Domain Validation Secure Server CA" (not verified)) by mx1.riseup.net (Postfix) with ESMTPS id 4DcM923ChPzDsyQ; Thu, 11 Feb 2021 21:13:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1613106822; bh=6PjOKd8sSRPgQKST9NBDRjcB4UvQctH6wb86ac8e6Rw=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=jsdomG0zdGRU7eDNOJsTFU1ajfZgUvwJ0nQsOsAT1SIIkKAYvlPowG56A0dRZFoph OoRChTOrb5PbNLXFMFIZ2sPTTfPoNNfxteL+/crKOEfmyNGeN333locj+kN5ifijl7 xAKdAMIw1TAqY/k8+Pc2a3V77BGB71OO7Sq0A8XM= X-Riseup-User-ID: DEE6F10F612F07FF9175786343E434BBC9CF690C008D9557BD1775BFF8E251C9 Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews1.riseup.net (Postfix) with ESMTPSA id 4DcM8t49D2z5vNN; Thu, 11 Feb 2021 21:13:30 -0800 (PST) Date: Fri, 12 Feb 2021 04:11:54 +0100 From: raingloom To: znavko--- via Subject: Re: How to secure Grub control from other distro? Message-ID: <20210212041154.567b3682@riseup.net> In-Reply-To: <1b5d702f00cc6f82e2ced9ce31e3060d@disroot.org> References: <1b5d702f00cc6f82e2ced9ce31e3060d@disroot.org> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Received-SPF: pass client-ip=198.252.153.129; envelope-from=raingloom@riseup.net; helo=mx1.riseup.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -0.26 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b=jsdomG0z; dmarc=fail reason="SPF not aligned (relaxed)" header.from=riseup.net (policy=none); spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Queue-Id: 5FA6E9403D2 X-Spam-Score: -0.26 X-Migadu-Scanner: scn1.migadu.com X-TUID: 7w3WgyHdSEnZ On Mon, 07 Dec 2020 22:31:47 +0000 znavko--- via wrote: > Hello! I have two distros on my PC: > on /dev/sda - Guix > on /dev/sdc - Ubuntu > > Today, after update and upgrade of newly installed Ubuntu and also > after installation of lubuntu-desktop and lxde on ubuntu, I was > unfortunately grieved. Lubuntu had recovered my Grub and had broken > everything! I was need to boot into Guix with grub command line and > make `guix system reconfigure /etc/config.scm` for to get my Grub > controlling by Guix again! > > I have a question. Have I any possibility to secure and save my Grub > from other buggy distros i may setup on other ssd in my pc? > > I think it will be hard to fight with ubuntu or debian or some other > distro not to touch Grub. My guess is that there is no universal way. Maybe remove the grub package from Ubuntu? I don't have anything Debian based to test it with, but I think that would disable the upgrade hooks that run grub-mkconfig.