From mboxrd@z Thu Jan  1 00:00:00 1970
From: Benjamin Slade <beoram@gmail.com>
Subject: LUKS-encrypted root and unencrypted /boot ?
Date: Wed, 01 Aug 2018 12:59:23 -0600
Message-ID: <87in4tgbg4.fsf@jnanam.net>
Mime-Version: 1.0
Content-Type: text/plain
Return-path: <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:42032)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <beoram@gmail.com>) id 1fkwLI-0002wC-I8
	for help-guix@gnu.org; Wed, 01 Aug 2018 14:59:29 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <beoram@gmail.com>) id 1fkwLD-0000y0-O1
	for help-guix@gnu.org; Wed, 01 Aug 2018 14:59:28 -0400
Received: from mail-it0-x22e.google.com ([2607:f8b0:4001:c0b::22e]:55906)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <beoram@gmail.com>) id 1fkwLD-0000x9-HW
	for help-guix@gnu.org; Wed, 01 Aug 2018 14:59:23 -0400
Received: by mail-it0-x22e.google.com with SMTP id d10-v6so187627itj.5
	for <help-guix@gnu.org>; Wed, 01 Aug 2018 11:59:23 -0700 (PDT)
Received: from sushoma (ip-19-36-244-173.west.us.northamericancoax.com.
	[173.244.36.19]) by smtp.gmail.com with ESMTPSA id
	125-v6sm44246itm.29.2018.08.01.11.59.21 for <help-guix@gnu.org>
	(version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
	Wed, 01 Aug 2018 11:59:21 -0700 (PDT)
List-Id: <help-guix.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/help-guix>,
	<mailto:help-guix-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/help-guix/>
List-Post: <mailto:help-guix@gnu.org>
List-Help: <mailto:help-guix-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/help-guix>,
	<mailto:help-guix-request@gnu.org?subject=subscribe>
Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org
Sender: "Help-Guix" <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
To: help-guix@gnu.org

Doing a full LUKS-encryption on root, including /boot results in very
slow unlocking at boot (about 30 secs even with --iter set to 1000). Is
there any way to do an unencrypted /boot with an encrypted root?

I found that at least in GuixSD 0.12 it didn't seem to be possible:
https://lists.gnu.org/archive/html/help-guix/2016-12/msg00096.html . Has
this changed?