Encrypted Images?

Encrypted Images?

[Christopher Howard]

Hi, I've recently starting learning how to use `guix system image', and have learned enough to create one raw image which I was able to copy onto a hard drive on another computer.

I am wondering if it is possible to use `guix system image' to create an image that is luks encrypted, with the other file systems and OS installed on that. If not, can I setup an luks-encrypted image manually and then have guix system install to that somehow, without having to boot up into an installer disc and run through all the installation steps?

I see documentation in the manual for the luks target, of course, but I am unclear on how that ties into guix system image and how much guix system is able to do on its own.

-- 
📛 Christopher Howard
🚀 gemini://gem.librehacker.com
🌐 http://gem.librehacker.com

בראשית ברא אלהים את השמים ואת הארץ

Re: Encrypted Images?

[Maxim Cournoyer]

Hi Christopher,

Christopher Howard <christopher@librehacker.com> writes:

> Hi, I've recently starting learning how to use `guix system image',
> and have learned enough to create one raw image which I was able to
> copy onto a hard drive on another computer.
>
> I am wondering if it is possible to use `guix system image' to create
> an image that is luks encrypted, with the other file systems and OS
> installed on that. If not, can I setup an luks-encrypted image
> manually and then have guix system install to that somehow, without
> having to boot up into an installer disc and run through all the
> installation steps?
>
> I see documentation in the manual for the luks target, of course, but
> I am unclear on how that ties into guix system image and how much guix
> system is able to do on its own.

It's not currently possible; 'guix system' doesn't offer much in terms
of declaring partitions layouts, creating file systems, LUKS layers,
etc.

-- 
Thanks,
Maxim

Re: Encrypted Images?

[Oleg Pykhalov]

[-- Attachment #1: Type: text/plain, Size: 1454 bytes --]

Hi Christopher,

Christopher Howard <christopher@librehacker.com> writes:

> Hi, I've recently starting learning how to use `guix system image',
> and have learned enough to create one raw image which I was able to
> copy onto a hard drive on another computer.
>
> I am wondering if it is possible to use `guix system image' to create
> an image that is luks encrypted, with the other file systems and OS
> installed on that. If not, can I setup an luks-encrypted image
> manually and then have guix system install to that somehow, without
> having to boot up into an installer disc and run through all the
> installation steps?
>
> I see documentation in the manual for the luks target, of course, but
> I am unclear on how that ties into guix system image and how much guix
> system is able to do on its own.

It's possible to generate an image by utilizing the functionality of the
install.scm file from git.savannah.gnu.org/git/guix/gnu/tests. Once
you've made the necessary changes to the system configuration within
this file, you can trigger the creation of the image by running make
check-system TESTS="encrypted-root-os". This action will generate the
image, and by examining the resulting derivations in the output, you
will find one that directs you to the disk image. You will require a
strong understanding of partitioning and bootloaders to successfully
transfer and deploy this image onto a hard drive of another computer.

Regargs,
Oleg.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 861 bytes --]