From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mathieu Othacehe Subject: Installer and luks support. Date: Sat, 08 Dec 2018 10:58:42 +0900 Message-ID: <8736r8kcdp.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55723) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gVRtM-0006cH-3g for guix-devel@gnu.org; Fri, 07 Dec 2018 20:58:53 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gVRtI-00035h-3y for guix-devel@gnu.org; Fri, 07 Dec 2018 20:58:52 -0500 Received: from mail-pl1-x636.google.com ([2607:f8b0:4864:20::636]:39670) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gVRtH-00035b-SD for guix-devel@gnu.org; Fri, 07 Dec 2018 20:58:48 -0500 Received: by mail-pl1-x636.google.com with SMTP id 101so2610950pld.6 for ; Fri, 07 Dec 2018 17:58:47 -0800 (PST) Received: from everest (108.236.13.160.dy.iij4u.or.jp. [160.13.236.108]) by smtp.gmail.com with ESMTPSA id c81sm8527232pfb.107.2018.12.07.17.58.44 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 07 Dec 2018 17:58:45 -0800 (PST) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel Hi Guix, I added support for disk encryption on the wip-newt-installer branch. The user can select the guided partitioning scheme "Guided - entire disk with encryption" or enable encryption partition by partition in the manual partitioning mode. I discovered an issue that also exist in other partitioning modes, and I don't know how to deal with it. The last step of the installer consists in: * Mount partitions on /mnt (depending on the result of partitioning step). * Write the system configuration to /mnt/etc/config.scm * Start cow-store service * Run guix system init /mnt/etc/config.scm /mnt * Unmount /mnt * Close luks mappings ---> fail, device is busy. It fails because at this step, the overlayfs created by cow-store is still present. To be able to close luks, I have to: mkdir /remove-store-overlay mount --move /gnu/store /remove-store-overlay herd stop cow-store herd stop guix-daemon kill -9 umount /remove-store-overlay Doing so, everything is cleaned-up, and it is possible to restart the installer and run it again (in case the previous install failed or so). Does anyone have a better idea on how to clean-up the overlayfs of cow-store so that everything can be closed properly? Thanks, Mathieu