From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id eL9gOop06mVGRwEAe85BDQ:P1 (envelope-from ) for ; Fri, 08 Mar 2024 03:14:35 +0100 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id eL9gOop06mVGRwEAe85BDQ (envelope-from ) for ; Fri, 08 Mar 2024 03:14:35 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=QRSWOMQw; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gmail.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1709864074; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=Tg//DmgVc43FgQ6n0sZeDqUmkMMxcQTpuYdmnoTqqk4=; b=BvfFsDw6DbN74+/takP8yqYlyS29sqSrSoD5G4d1i6Fzkzu29CGjSyW+hGFxVKk+YXGC1U Rci/r1kEy0WDkXId9S8jZoG4HMP6hPuXcmNxzgAJCcLHAzzpWPj2tlBZ/JS/2EpvfX7g/V OsDN8uw04aGbsyTdb9gU13nC6Q+YGjmXy6ieAxPxUta30TBoNE1/XU151pqtari0ee3mqy AMOA9ioQLOc2W4anePGchNEe4qDvMcNHjxvHFNZpz7HuLZu5nCoI9LG8IKUrgsr/R9Pxq/ gG5rbKBlmTFRAqlrlrRhmglVSJCqMWdxBWdwbcRq72zJb2IypMZkThgdMOmzhA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=QRSWOMQw; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gmail.com ARC-Seal: i=1; s=key1; d=yhetil.org; t=1709864074; a=rsa-sha256; cv=none; b=PNsT/L2+XxW2XHBIL1Hw3MNi/zFsvHSu0nsYHYQEu+Bz/9MeskseN9sQP+juTDdtprhWPo mZhzsDyWAsDQD1Pq/ujmIwyS380XbVA0/C0fTO+LBKU/7GhiDCl9XoUdiG0ZPeeA8U1TXu Rtb9edlP3t+KQZ9A0UMeODGjVvW/KSzrnrTsh0mzJ5i6XHjAYl8CxQ8rHpOwYm8tA2WyXV AESk0+/zoV2Da7UNnOlINxXVhIGLLDCtgqiNupGRTkA74ejy++jhuIX75Gb31W9EOpT/4b vGDzym8WVFwJIm3nbbbPdjHlNpja+8+ZFxlYOgQW2590OYyhj60o148YKDewHQ== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id AD7C621B08 for ; Fri, 8 Mar 2024 03:14:34 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1riPkS-0007P0-9u; Thu, 07 Mar 2024 21:14:12 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1riPkQ-0007Or-Su for help-guix@gnu.org; Thu, 07 Mar 2024 21:14:10 -0500 Received: from mail-qv1-xf2e.google.com ([2607:f8b0:4864:20::f2e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1riPkP-0000qj-Gq for help-guix@gnu.org; Thu, 07 Mar 2024 21:14:10 -0500 Received: by mail-qv1-xf2e.google.com with SMTP id 6a1803df08f44-69012259657so2090096d6.0 for ; Thu, 07 Mar 2024 18:14:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1709864048; x=1710468848; darn=gnu.org; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:from:to:cc:subject:date:message-id:reply-to; bh=Tg//DmgVc43FgQ6n0sZeDqUmkMMxcQTpuYdmnoTqqk4=; b=QRSWOMQwR/byEW8ZtYC3bvjsco600a3xl2d7Zvs1yV5+EjO92xktoWziJE1h3CQG2o Sp3kZwhNBBziQQ3Q3/xmQIX7vPR61BHgyiMlSAlkTet22kzIvKfKDida9hA9kAPoyqM1 598WwwT+JTh0Y3Iu8moDXHW7BodcNhzzOmGaUvXsME2SlBCzTqKrBF2h6HzO8qgaSTqR OgczlQ+s8qQBQ8tk74t27odyQBAjamwQNj9WoaGCp/8rYhr4goCBsz/j4LUdBTp++U2f 4iwLcaPMt9BknGF6xwbX8/yJVpIaa+nGE/8fqi0n+n5976cTfrVmJCe0KHuq0yCpQyvY 2LiA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1709864048; x=1710468848; h=mime-version:user-agent:message-id:date:references:in-reply-to :subject:cc:to:from:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Tg//DmgVc43FgQ6n0sZeDqUmkMMxcQTpuYdmnoTqqk4=; b=THJF54nmZ/JeLS+bPVmGtxBL//QweUXuIP2H6hWV4xuU/tZzAGfMeUR63dv0I58Or0 Onk0LYLXjgtYFXq+Ao2O/g+p3zz0JICLrG/0rw/oPnbCw9aR/Q5lDC/pKqF0TnIT84l6 0KEHg6ochiAMjBrb8cPyZZG/xg9onkYCgkl6/7mMhUm6/PrsjHVkVIrpG9o6qqFsecHL RP9rCndGn0I//Yf379J8aqsuqAqrVIYv/3Y1bRO2gE34oeJlj13GiW5ORUywkkqejt3H FaRbAzNhDAbSiJDM1pGjUeWO0msxPOCpWQ1PB7saZcvv87Hyc8sVmbsMeMn0JQv10jD0 /BiA== X-Gm-Message-State: AOJu0YyzBCQ4EEa7Vs2wzomD0Qij80/Zh/RxLnZuFL1LD6uxnTHEaQ/S lVPXxYVMNiFW3xZVQwJ4sRRtfTfCCILAOTiqaxdTRuvioZZlCauVojh+zEA9 X-Google-Smtp-Source: AGHT+IEz/CqU94fp521EQjfF1rHaR2xOkNTyixjihLvKLDoZRSbceinOCgb7ajhnYyQXcUNqHDzlfw== X-Received: by 2002:ad4:53a4:0:b0:690:951c:54d0 with SMTP id j4-20020ad453a4000000b00690951c54d0mr5965169qvv.65.1709864047748; Thu, 07 Mar 2024 18:14:07 -0800 (PST) Received: from hurd (dsl-205-151-56-211.b2b2c.ca. [205.151.56.211]) by smtp.gmail.com with ESMTPSA id em19-20020ad44f93000000b0068fdb03a3a3sm9300267qvb.95.2024.03.07.18.14.06 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 07 Mar 2024 18:14:06 -0800 (PST) From: Maxim Cournoyer To: Christopher Howard Cc: Help Guix Subject: Re: Encrypted Images? In-Reply-To: (Christopher Howard's message of "Wed, 6 Mar 2024 09:53:14 -0900") References: Date: Thu, 07 Mar 2024 21:14:05 -0500 Message-ID: <87cys5h3ma.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2607:f8b0:4864:20::f2e; envelope-from=maxim.cournoyer@gmail.com; helo=mail-qv1-xf2e.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: help-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Scanner: mx12.migadu.com X-Migadu-Spam-Score: -8.53 X-Spam-Score: -8.53 X-Migadu-Queue-Id: AD7C621B08 X-TUID: PK3GLbpY24lk Hi Christopher, Christopher Howard writes: > Hi, I've recently starting learning how to use `guix system image', > and have learned enough to create one raw image which I was able to > copy onto a hard drive on another computer. > > I am wondering if it is possible to use `guix system image' to create > an image that is luks encrypted, with the other file systems and OS > installed on that. If not, can I setup an luks-encrypted image > manually and then have guix system install to that somehow, without > having to boot up into an installer disc and run through all the > installation steps? > > I see documentation in the manual for the luks target, of course, but > I am unclear on how that ties into guix system image and how much guix > system is able to do on its own. It's not currently possible; 'guix system' doesn't offer much in terms of declaring partitions layouts, creating file systems, LUKS layers, etc. -- Thanks, Maxim