From mboxrd@z Thu Jan  1 00:00:00 1970
From: =?utf-8?Q?Cl=C3=A9ment?= Lassieur <clement@lassieur.org>
Subject: Re: LUKS-encrypted root and unencrypted /boot ?
Date: Thu, 02 Aug 2018 08:59:51 +0200
Message-ID: <87effh8d94.fsf@lassieur.org>
References: <87in4tgbg4.fsf@jnanam.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Return-path: <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:49915)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <clement@lassieur.org>) id 1fl7aW-0003PE-UX
	for help-guix@gnu.org; Thu, 02 Aug 2018 02:59:57 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <clement@lassieur.org>) id 1fl7aT-0002wr-Tm
	for help-guix@gnu.org; Thu, 02 Aug 2018 02:59:57 -0400
Received: from mail.lassieur.org ([83.152.10.219]:59390)
	by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
	(Exim 4.71) (envelope-from <clement@lassieur.org>)
	id 1fl7aT-0002w6-Gc
	for help-guix@gnu.org; Thu, 02 Aug 2018 02:59:53 -0400
In-reply-to: <87in4tgbg4.fsf@jnanam.net>
List-Id: <help-guix.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/help-guix>,
	<mailto:help-guix-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/help-guix/>
List-Post: <mailto:help-guix@gnu.org>
List-Help: <mailto:help-guix-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/help-guix>,
	<mailto:help-guix-request@gnu.org?subject=subscribe>
Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org
Sender: "Help-Guix" <help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org>
To: Benjamin Slade <beoram@gmail.com>
Cc: help-guix@gnu.org

Hi Benjamin,

Do you use Libreboot?

Benjamin Slade <beoram@gmail.com> writes:

> Doing a full LUKS-encryption on root, including /boot results in very
> slow unlocking at boot (about 30 secs even with --iter set to 1000). Is
> there any way to do an unencrypted /boot with an encrypted root?

I'm unsure that would help, because GRUB would still have to unencrypt /
to access the kernel (the kernel is in /gnu/store).

Cl=C3=A9ment