From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id iPmSBF/vxF5CWwAA0tVLHw (envelope-from ) for ; Wed, 20 May 2020 08:50:39 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id IQ1hAF/vxF5UUAAA1q6Kng (envelope-from ) for ; Wed, 20 May 2020 08:50:39 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 78EDB940039 for ; Wed, 20 May 2020 08:50:38 +0000 (UTC) Received: from localhost ([::1]:37510 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jbKQv-0000Dl-8B for larch@yhetil.org; Wed, 20 May 2020 04:50:37 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:44726) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jbKPn-0006vO-LQ for guix-devel@gnu.org; Wed, 20 May 2020 04:49:27 -0400 Received: from mout02.posteo.de ([185.67.36.66]:51031) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jbKPm-0007MR-0H for guix-devel@gnu.org; Wed, 20 May 2020 04:49:27 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout02.posteo.de (Postfix) with ESMTPS id 5897F240101 for ; Wed, 20 May 2020 10:49:21 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.net; s=2017; t=1589964561; bh=NsitrTuweH6UaefJc+4xcE363EQf8xEvpw8k7n1tObA=; h=From:To:Cc:Subject:Date:From; b=quG/eQAOg9PyUezlrS3QHIsb3acOfBJ1fZDzs7lnvsUcQvRvfXuSjri0m8/jWoEQJ nXpzGMGjZvZ+VXnmioIMDQ/ScX1wRZjcB88M09BD6SGF6dakOl/9RP6FKgr2StkXRT zpQjz3m1kqanIoCKMNoj5yqgrsHKuylatazIKEkuxIsgFYsPw48xLc8sAPNEjoNKlu NdcpiKMbuk0Oa8z7tQqxLmSHQoNJiEceDf/B3lU4bC+hL4/NSJ6Fd1NbzwhLQbNX1y srwV9BAwfpVJegmj/2lra1j8MyR6tEPxFnV9JlyY+mWBzg1rKUqyZmcvde5hxpVGAa hg4zXNmqt5r/A== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 49RmdW6kHqz9rxB; Wed, 20 May 2020 10:49:19 +0200 (CEST) References: <87ftdmi7pp.fsf@ambrevar.xyz> <17c316adc8485d1f09f70d291cfaad50258c6c1f.camel@wine-logistix.de> <87k12wsg36.fsf@ambrevar.xyz> <87y2rcgx6y.fsf@yamatai> <87eerih8pq.fsf@ambrevar.xyz> User-agent: mu4e 1.4.4; emacs 26.3 From: Guillaume Le Vaillant To: Pierre Neidhardt Subject: Re: Unencrypted boot with encrypted root In-reply-to: <87eerih8pq.fsf@ambrevar.xyz> Date: Wed, 20 May 2020 10:49:09 +0200 Message-ID: <87blmjout6.fsf@yamatai> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=185.67.36.66; envelope-from=glv@posteo.net; helo=mout02.posteo.de X-detected-operating-system: by eggs.gnu.org: First seen = 2020/05/20 04:49:21 X-ACL-Warn: Detected OS = Linux 3.11 and newer X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=fail (rsa verify failed) header.d=posteo.net header.s=2017 header.b=quG/eQAO; dmarc=fail reason="SPF not aligned (strict)" header.from=posteo.net (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Spam-Score: -1.51 X-TUID: QGHf/hpiFJsY --=-=-= Content-Type: text/plain Pierre Neidhardt skribis: > Have you tried to unlock a ZFS-encrypted home with pam_mount? > > I found these related links: > > https://blogs.oracle.com/solaris/user-home-directory-encryption-with-zfs-v2 > > https://old.reddit.com/r/linuxquestions/comments/g7t38d/mounting_an_encrypted_zfs_home_filesystem_at_user/ > > ZFS is not listed here: > http://pam-mount.sourceforge.net/pam_mount.conf.5.html No, I've never tried. In fact, I only tried ZFS once a few years ago, and as for my use case I didn't see an advantage over BTRFS, I kept using BTRFS. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQQkUwKxurH4Z/3KlryPP4Yfgut6mgUCXsTvBQAKCRCPP4Yfgut6 mi2XAP4nDJTK8welpLPXEVMQ+aIV+96c1q64chMeqZXfeXQnIwD6A4ZBSwm2nSY9 U9Kh5+evEnOvSYLvOuHA4sSH0KtXHQQ= =E2Zq -----END PGP SIGNATURE----- --=-=-=--