From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id G2jVAVJ+FGGoJwEAgWs5BA (envelope-from ) for ; Thu, 12 Aug 2021 03:50:10 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id KNJyOFF+FGFDCgAAbx9fmQ (envelope-from ) for ; Thu, 12 Aug 2021 01:50:09 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 55AF22F918 for ; Thu, 12 Aug 2021 03:50:09 +0200 (CEST) Received: from localhost ([::1]:52268 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mDzrE-000375-CW for larch@yhetil.org; Wed, 11 Aug 2021 21:50:08 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:48158) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mDzr8-00035y-Jn for guix-patches@gnu.org; Wed, 11 Aug 2021 21:50:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:53741) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mDzr7-00069K-K4 for guix-patches@gnu.org; Wed, 11 Aug 2021 21:50:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1mDzr7-0004J9-HF for guix-patches@gnu.org; Wed, 11 Aug 2021 21:50:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#49654] [PATCH] doc: Add full disc encryption guide to the cookbook Resent-From: jbranso@dismail.de Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 12 Aug 2021 01:50:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 49654 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: "Ludovic =?UTF-8?Q?Court=C3=A8s?=" Cc: 49654@debbugs.gnu.org, Sarah Morgensen , rg@raghavgururajan.name Received: via spool by 49654-submit@debbugs.gnu.org id=B49654.162873294616493 (code B ref 49654); Thu, 12 Aug 2021 01:50:01 +0000 Received: (at 49654) by debbugs.gnu.org; 12 Aug 2021 01:49:06 +0000 Received: from localhost ([127.0.0.1]:37054 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mDzqD-0004Hx-SG for submit@debbugs.gnu.org; Wed, 11 Aug 2021 21:49:06 -0400 Received: from mx1.dismail.de ([78.46.223.134]:10924) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mDzqC-0004HQ-5B for 49654@debbugs.gnu.org; Wed, 11 Aug 2021 21:49:04 -0400 Received: from mx1.dismail.de (localhost [127.0.0.1]) by mx1.dismail.de (OpenSMTPD) with ESMTP id 2317e5b2; Thu, 12 Aug 2021 03:48:57 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=dismail.de; h= mime-version:date:content-type:content-transfer-encoding:from :message-id:subject:to:cc:in-reply-to:references; s=20190914; bh=ALDem/iNaZusOV0Mikb/Gn7tGmeAqYzOM/vpSw2RRUY=; b=ZbbOEKx9dAZF FjfN1fegurx8dnFqr02ijfn31VefpeQft7VNIffJ84ojOto+ix0kVhGFsdaGaFUC 5ifZDVvwyvcuLO8t2gZSSdswa8qnf13N2h2fqsFyDagkfdYOotsh4ifQivFTb0w+ Xlctt3PK0DN+Q+e+g3Y/rVWeZKWC2h69ULZzIfVt44foiZ93Q8tzkYyJZAU9Aavk Pkd23mgWPfuPcXtArxebmprEMQUJw+/t7VsRPzVi1HaLcEGD2XV+nRn028GFZE61 zDdaPYEvVfDiGEyRyc/4gT0EIEOV86yKtCLHS9c60TjJNHe+GxRW/aqrn/QQB3Tb /U3RQPt2Ew== Received: from smtp2.dismail.de ( [10.240.26.12]) by mx1.dismail.de (OpenSMTPD) with ESMTP id cac02d2f; Thu, 12 Aug 2021 03:48:56 +0200 (CEST) Received: from smtp2.dismail.de (localhost [127.0.0.1]) by smtp2.dismail.de (OpenSMTPD) with ESMTP id f391c7bd; Thu, 12 Aug 2021 03:48:56 +0200 (CEST) Received: by dismail.de (OpenSMTPD) with ESMTPSA id 4cef1b6f (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO); Thu, 12 Aug 2021 03:48:55 +0200 (CEST) MIME-Version: 1.0 Date: Thu, 12 Aug 2021 01:48:54 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: RainLoop/1.14.0a Message-ID: <56b97910c9bac2b0eafb40e0b70aadea@dismail.de> In-Reply-To: <87pmukkqvx.fsf_-_@gnu.org> References: <87pmukkqvx.fsf_-_@gnu.org> <86tukns2mc.fsf@mgsn.dev> <20210720052229.15438-1-jbranso@dismail.de> <2a373bf54c17a11a37ab8f2ca86ef07f@dismail.de> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" Reply-to: jbranso@dismail.de X-ACL-Warn: , jbranso--- via Guix-patches From: jbranso--- via Guix-patches via X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1628733009; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=wkQMC23bTsbVVByCcGcotV/8WpkO0ntAi12oVzimt6Q=; b=PbqBRp8nzOMfBsta2iVPLscSPqG2yiNp2jpRWjKP4YNZFDRh1kQ4rKUblyJ6IPi6pz3zln r69QTtXr2MNrf3MRssx6YSba+NzZ01LLnGMdVc5sE/2H6vY2LX6f7p59IRHkjKa6ERaK38 cT5bd+eHBflucP8/TNQ8lppU6BXwZ+v4eQxX/qBPs4182Psjqe7CkLC73X7vJCSqghkg9P 5X1G2vl3EgyY7V1CcAFlWEhRaFwq6ew7Pc5opENaRF24M9gJB4IWEqMrWI6PGM63PL6Tzu AmS+y33pv6Z1EFnfZbvZkOkjW1zMcNuSNUSbybEHqRFwkMJMBjxXfDWk1U4DMw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1628733009; a=rsa-sha256; cv=none; b=hw0PSNKoESwqdxSkVNGvVSBytyRvweqSMeVE7LvGYi99XcTsI8VRJSHIwx+DVeCA02ErPu lqCV6W4GlVJGdkGGyiCrTpE8XLfjQn+GOptXeLDgfXI7mucTMlBh8vUOdlGkGFR8p+otoY +MYdqNjh8+JzidPiFRzheb+hEP7lH3CZr4N62YhPtAfEkme5O4hLTT2mWs2UmgGxAeFSfW YxblA/qiBi/o75EGiQA9ENb4T13dtBFXFC0FcpmKa4a/f8hMO9sJQomhdvxFvBJc8TcA9o zpCc0EIPeZGbByBijqw1cTnWgiWS3Xa4DZAfGiKd+Xl1546BMaf88CDgQY9gGg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=dismail.de header.s=20190914 header.b=ZbbOEKx9; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Spam-Score: -2.91 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=dismail.de header.s=20190914 header.b=ZbbOEKx9; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Queue-Id: 55AF22F918 X-Spam-Score: -2.91 X-Migadu-Scanner: scn1.migadu.com X-TUID: y8qLldxVxjxN August 11, 2021 10:17 AM, "Ludovic Court=C3=A8s" wrote:=0A= =0A> Hi Joshua and all,=0A> =0A> jbranso@dismail.de skribis:=0A> =0A>> Ju= ly 21, 2021 6:50 PM, "Sarah Morgensen" wrote:=0A>> = =0A>>> Hello Joshua, Raghav,=0A>>> =0A>>> Good to see more guides like th= is. In addition to what others have=0A>>> already pointed out, I've got f= ew readability suggestions, reading this as a=0A>>> layperson :) (Questio= ns are intentended to be rhetorical, to illustrate=0A>>> where a layperso= n might have questions or be confused.)=0A>> =0A>> Thanks so much for you= proof-reading! I'll update and push a new patch!=0A>> =0A>>> Also, consi= der referencing relevant sections of the manual, such as=0A>>> =0A>>> htt= ps://guix.gnu.org/manual/en/html_node/Manual-Installation.html=0A>>> =0A>= >> so users know where to find more detailed information.=0A>> =0A>> That= is an awesome idea! I will do so!=0A> =0A> My main question would be: wh= at do you think is not covered in the=0A> =E2=80=9CManual Installation=E2= =80=9D section?=0A> =0A> That section covers full disk encryption and oth= er things you propose,=0A> such as partitioning, downloading the ISO, aut= henticating it, changing=0A> the keyboard layout, etc.=0A=0AI think that = libreboot does not currently support the latest version of=0Aencryption..= .or only supports LVM v1....something like that. Perhaps those=0A"libreb= oot specific encryption commands" need not be in the official manual?=0A= =0A> =0A> From a maintenance perspective, it does not seem reasonable to = maintain=0A> to similar pieces of documentation on these matters. From a = user=0A> perspective, it could be confusing or downright deceiving if one= of=0A> these two documents is out of date or erroneous.=0A=0AI'm game fo= r that. I personally find the "Manual Installation" section =0Aslightly = too terse...I've successfully installed guix encrypted before,=0Abut I ha= d to use the graphical installation. I have a hard time =0Acomprehending= how to manually install an encrypted guix, but I also just=0Ahave a very= hard time understanding new guix things too. :)=0A=0APerhaps, if the ma= nual does not have it, we could provide an example =0Aconfig of an encryp= ted /home ? I feel like the majority of guix users=0Ado not use libreboo= t, so a encrypted / is not an option for most of them.=0A=0A> =0A> All in= all, for the topic we=E2=80=99re discussing, I=E2=80=99d suggest consoli= dating=0A> existing material instead of writing new material.=0A> =0A> WD= YT?=0A> =0A> Thanks,=0A> Ludo=E2=80=99.