From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id aJJ0ItsPAmRRQAAAbAwnHQ (envelope-from ) for ; Fri, 03 Mar 2023 16:18:51 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id 2N6AItsPAmTgwgAA9RJhRA (envelope-from ) for ; Fri, 03 Mar 2023 16:18:51 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4AB8CA6EE for ; Fri, 3 Mar 2023 16:18:51 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=burningswell-com.20210112.gappssmtp.com header.s=20210112 header.b=RICKVqjx; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1677856731; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=yBgptkvSermwgJM3tTa5iubATDGbfpZlWhtav5gDLdc=; b=pWIlleUHfn2KwBW+M+b3SXCIqjMJmRfF7P+7Ecznc0yTb6okqemecUqgqYWj3y+0aQSUIJ RN6+S0l2cnCnNuxSUNcO10jlcQQoNz7qgsbLPZ8jpWKBd1HaoheO9t9uO5bT3N9zYoMbdW cNMr1gtWqVJsIPlOwlQ/pI2nB88X5bk0krzTrwOzc4XdHsz51DPw0KoksVwsdW4bIlqQdb ja+g9tJNNU5G7t0d7y4PQK+SvPd3f6fSbEvB0c43op3nFR+I3llcBm6yO1euyrr8+8nTv1 DBOWY99eM7CHDPz4s3Rr7GIWnmWZFLP9NS7yjsFz/ENM5l5AKG1p9kbxBatr7w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=burningswell-com.20210112.gappssmtp.com header.s=20210112 header.b=RICKVqjx; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1677856731; a=rsa-sha256; cv=none; b=BpBwvhLgg8w6/nUL0Lbu8cO0QSrl4ckr4QY4VPtfETw6xhAx17aTd1TvbJaNc3iaHBpsox Pa85uJKLJEFSktimj/pLji41YGMMwu4mSHAJh5GfzgRHgAkFArTlIEFkM5B+Na1th5BoaA cGMWw4Pf14bO5xUceh0eEB4nUVpoupFDS206jOsoocue+DIhk2ahKd/EfCX1Cf+/J5dWbX BstdYD8MxeimQsvy/ZInS1PEXFx8PvBWZRxEys69y5l3S0ztZWL+3WeI+cT5ZzpHHNfudQ izn/aYfM00/NGNdkxni8t9lW/cHVdI5Dm83Kcxous6CuUmlinT2As8pdkdhs7w== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pY7At-0003Cu-3u; Fri, 03 Mar 2023 10:18:23 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pY7Ar-0003Cj-U4 for help-guix@gnu.org; Fri, 03 Mar 2023 10:18:21 -0500 Received: from mail-wr1-x435.google.com ([2a00:1450:4864:20::435]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1pY7Ap-0005ox-VB for help-guix@gnu.org; Fri, 03 Mar 2023 10:18:21 -0500 Received: by mail-wr1-x435.google.com with SMTP id bw19so2590014wrb.13 for ; Fri, 03 Mar 2023 07:18:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=burningswell-com.20210112.gappssmtp.com; s=20210112; t=1677856697; h=mime-version:message-id:in-reply-to:date:subject:cc:to:from :user-agent:references:from:to:cc:subject:date:message-id:reply-to; bh=yBgptkvSermwgJM3tTa5iubATDGbfpZlWhtav5gDLdc=; b=RICKVqjxb4iTG/OSqnHtlNWFfGYyqxJfjJe0cAJbmljdIK2033jtY9EBKXGKCGOfs7 NHeRKEWls3R4TkQY9OBlsgFfzLx06JgwrzMHNujBILG8I5O9Gf75vtzRDDOjmj2DFfvN fuV7aU+IXOMxcWSnluXdvvKey0QtGhVaFYtmt02Ky+dWRh/7gOC+r5tVcqjT9kDa1iAO V5JBaOLOkwZCQ1LZyjM62W2Dok629ZwssTyIFzCSg7jTQAlOe3nKbQZKLBgA62xQrckp 9LzaTJHK9QAyq/O2NsySCEQhQYiA7ARODPAtMJZwZxuuiXUyOqfjVRN5p+1x49NFbTya 6GHQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1677856697; h=mime-version:message-id:in-reply-to:date:subject:cc:to:from :user-agent:references:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=yBgptkvSermwgJM3tTa5iubATDGbfpZlWhtav5gDLdc=; b=UaYLnUfv6vgYCzUcnNSmxRe/T+Kvd8L4c53kHq4X2hMxc76V0/vDYzAqwtwlC3XprZ OLiIdgfdmNFVORu9gj/dIqhfvYaCRBW98lVmhNhvxkXGvxFRwDbSvB+RkjsDsd/BUlCn FjZLVhzB9rNHqY8rYP9iL9IXPn/AT2IivUixOkpHDVUW5J+59MwnWMPHmPApkYwmvlaX 17eea6JfpqYXhKpULLZkAIRWCYyuJQIwdFVsCc6HtO06m10daKSSiXHQMw0R/AtW8DYm Cp2xJhGlxGmt2S/CWsSyEOkZYyITFW7ttmZXOIZw7mkJcV22OibjRcWlPM9m+RVKh/O9 SLoQ== X-Gm-Message-State: AO0yUKW9kM1w8TOuD4VgQZ1Z3JARu7kancj1haBlLenWK/RVJkxgF7Kz jkSjY53Rv2T26zFsSwl31cm+nA5MtSPQ/5A0X3o= X-Google-Smtp-Source: AK7set++2Adh07nzOjFIlJEZsjaWaBNwjsbiZKhVOzV5JLiHAplg68kZCXBYG6RiIxCCcxAcPhlvxQ== X-Received: by 2002:a05:6000:18c:b0:2c7:57e:633e with SMTP id p12-20020a056000018c00b002c7057e633emr1578012wrx.49.1677856697255; Fri, 03 Mar 2023 07:18:17 -0800 (PST) Received: from bombaclaat ([2a01:598:b1ad:1fff:8e8b:b210:246d:cd7a]) by smtp.gmail.com with ESMTPSA id g15-20020a5d554f000000b002c5526234d2sm2506388wrw.8.2023.03.03.07.18.16 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 03 Mar 2023 07:18:16 -0800 (PST) References: <20230302112553.GD11782@beffara.org> User-agent: mu4e 1.8.13; emacs 30.0.50 From: Roman Scherer To: Emmanuel Beffara Cc: help-guix@gnu.org Subject: Re: installation on LVM on LUKS Date: Fri, 03 Mar 2023 16:05:24 +0100 In-reply-to: <20230302112553.GD11782@beffara.org> Message-ID: <86o7p9vp6w.fsf@burningswell.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Received-SPF: none client-ip=2a00:1450:4864:20::435; envelope-from=roman.scherer@burningswell.com; helo=mail-wr1-x435.google.com X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: X-Migadu-Spam-Score: -11.90 X-Spam-Score: -11.90 X-Migadu-Scanner: scn0.migadu.com X-Migadu-Queue-Id: 4AB8CA6EE List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: help-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-TUID: 1FuUr+k98yAp --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Emmanuel, did you add the cryptsetup-static and lvm2-static packages to the packages field of your operating system? Apart from that, I think you also need to add the dm-crypt module to the initrd-modules field of the of the operating system. I'm not sure about your other question, but from what I understand the reason why the kernel and the initrd live in the store and not in the EFI partition might be that you actually would need to put the kernel and the initrd for *each* system generation onto the EFI partition, so you can boot different system generations. And that would fill up the EFI partition pretty quickly. I hope that helps. Roman Emmanuel Beffara writes: > Hello, > > I am currently trying to install Guix System on my laptop and I am facing= an > issue with the bootloader configuration. > > I use full-disk encryption with a single encrypted partition, split into > several logical volumes using LVM, plus an extra non-encrypted partition = for > EFI boot material: > > nvme0n1 259:0 0 953,9G 0 disk > =E2=94=9C=E2=94=80nvme0n1p1 259:1 0 953,4G 0 part > =E2=94=82 =E2=94=94=E2=94=80manivelle 254:0 0 953,4G 0 crypt > =E2=94=82 =E2=94=9C=E2=94=80storage-swap 254:1 0 32G 0 lvm = [SWAP] > =E2=94=82 =E2=94=82 [...] > =E2=94=82 =E2=94=94=E2=94=80storage-guix 254:5 0 64G 0 lvm / > =E2=94=94=E2=94=80nvme0n1p2 259:2 0 487M 0 part /boot > > I attach the system configuration, which I derived from the desktop templ= ate. > > Everything installed fine EXCEPT that Grub fails to load its LVM volume, = hence > the root partition is not found. Indeed, the produced grub.cfg has no men= tion > of lvm anywhere. If I adjust it by inserting "insmod lvm" somewhere, eith= er at > the start or in a menuentry, or if I do that by hand in the Grub shell, t= hen > the system starts and works fine. > > Did I miss something in the configuration ? > > > As a related point, this setup requires entering the decryption password > twice: once so that Grub can load the kernel from the store, and once so = that > the kernel can open the volume itself. I understand the situation is know= n, > but it could be avoided, for instance, by copying the kernel and initrd > somewhere in the EFI partition so that they could be loaded directly. Bes= ides, > for some reason, Grub is extremely slow at opening the partition: it takes > around 30 seconds to start after I correctly enter the password, whereas = the > kernel boots in just a few seconds after I enter the password for it. > > Any thoughts on this ? --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFTBAEBCAA9FiEE0iajOdjfRIFd3gygPdpSUn0qwZkFAmQCD7cfHHJvbWFuLnNj aGVyZXJAYnVybmluZ3N3ZWxsLmNvbQAKCRA92lJSfSrBmUwVCACxcF18d60/PVLa utgIdT19Vtc3+WKSPDmLzyElUawnDewX7dq/FuQsIt+5ceDdOnetWh0b7KCYoUkD 9RY2flASBRxjFD4d1jojEnViNI3JBtv0nQ8TjiQmcNqZ/b4iH+CoEAzZNjJ2Ldn3 QD1chV9T6OtcUOnwRymKCmMWY8bxzXfgv1lukl+SytFwmj3IZp2uKH+pLQD/CW6c wmlFaaWGsSCaVL1XmAFGQLdRYdYc5KqKwytY6nfkBbAxYxNTZUdC8FGsy6xB0QJE fraN/rrlLe6RonJr1zk7UbM+UbZAhWfsvZJ2EOsU0FXkqxobzEUeRs/aJNVXabv7 Ebqc6mVr =2lTe -----END PGP SIGNATURE----- --=-=-=--