all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
* bug#69319: Unbootable, unfixable system
@ 2024-02-23  7:15 Nathan Dehnel
  2024-02-23 10:33 ` Josselin Poiret via Bug reports for GNU Guix
  2024-02-23 17:17 ` Nathan Dehnel
  0 siblings, 2 replies; 7+ messages in thread
From: Nathan Dehnel @ 2024-02-23  7:15 UTC (permalink / raw)
  To: 69319

This config results in grub rescue "unknown filesystem <uuid of my
btrfs rootfs>" when I try to boot it. I have verified that all the
device uuids are correct, and the bootloader, mapped-devices, and
file-systems sections are identical in form to my other system which
boots fine. i can mount the boot partition and unlock and mount the
root partition manually, so they're not broken. I have no idea why
it's not working. My guess is that reconfigure is broken inside a
chroot somehow.

(use-modules (gnu))
(use-service-modules networking ssh sysctl shepherd base)
(use-package-modules vpn linux)
(use-modules (nongnu packages linux)
            (nongnu system linux-initrd)
            (gnu services)
            (guix packages)
            (gooby-channel packages baksnapper))
(define bashrc
   (local-file "../bashrc"))
(define nanorc
   (local-file "../nano/nanorc"))
(operating-system
(kernel linux)
 (initrd microcode-initrd)
 (firmware (list linux-firmware))
 (locale "en_US.utf8")
 (timezone "America/Chicago")
 (keyboard-layout (keyboard-layout "us"))
 (host-name "guixoffline")
 (bootloader
   (bootloader-configuration
     (bootloader grub-efi-bootloader)
       (targets '("/boot/efi1"))
     (keyboard-layout keyboard-layout)))
 (mapped-devices
   (list (mapped-device
           (source
             (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
           (target "offline1")
           (type luks-device-mapping))
))
 (file-systems
   (cons* (file-system
            (mount-point "/boot/efi1")
            (device (uuid "3339-DAE2" 'fat32))
            (type "vfat"))
          (file-system
            (mount-point "/")
            (device "/dev/mapper/offline1")
            (type "btrfs")
            (options "compress=zlib:9")
            (dependencies mapped-devices))
          %base-file-systems))
 (users (cons* (user-account
                 (name "nathan")
                 (comment "Nathan Dehnel")
                 (group "users")
                 (home-directory "/home/nathan")
                 (supplementary-groups '("wheel" "netdev" "audio" "video")))
               %base-user-accounts))
 (packages
   (append
           (specification->package "btrfs-progs")
           (specification->package "parted")
           (specification->package "mdadm")
           (specification->package "git")
           (specification->package "nss-certs")
           (specification->package "nix")
           (specification->package "efibootmgr")
           (specification->package "smartmontools")
           (specification->package "iotop")
           (specification->package "bcache-tools")
           (specification->package "lsof")
           (specification->package "wireguard-tools")
           (specification->package "baksnapper")
           (specification->package "file")
           (specification->package "rsync"))
     %base-packages))
 (services
   (append
     (list
          (service openssh-service-type
            (openssh-configuration
             (permit-root-login #t)
             (password-authentication? #t)
             (authorized-keys
              `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
                ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
                ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
                ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
))))
           (service connman-service-type)
           (service ntp-service-type)
           (service gpm-service-type)
           (simple-service 'nanorc etc-service-type
                       (list `("nanorc", nanorc)))
)
       %base-services)))




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#69319: Unbootable, unfixable system
  2024-02-23  7:15 bug#69319: Unbootable, unfixable system Nathan Dehnel
@ 2024-02-23 10:33 ` Josselin Poiret via Bug reports for GNU Guix
  2024-02-23 17:17 ` Nathan Dehnel
  1 sibling, 0 replies; 7+ messages in thread
From: Josselin Poiret via Bug reports for GNU Guix @ 2024-02-23 10:33 UTC (permalink / raw)
  To: Nathan Dehnel, 69319

[-- Attachment #1: Type: text/plain, Size: 733 bytes --]

Hi Nathan,

Nathan Dehnel <ncdehnel@gmail.com> writes:

> This config results in grub rescue "unknown filesystem <uuid of my
> btrfs rootfs>" when I try to boot it. I have verified that all the
> device uuids are correct, and the bootloader, mapped-devices, and
> file-systems sections are identical in form to my other system which
> boots fine. i can mount the boot partition and unlock and mount the
> root partition manually, so they're not broken. I have no idea why
> it's not working. My guess is that reconfigure is broken inside a
> chroot somehow.

I see you're using LUKS.  Is it LUKS1 or LUKS2?  LUKS2 unfortunately
doesn't work at present, because we're still on Grub 2.06.

Best,
-- 
Josselin Poiret

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 682 bytes --]

^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#69319: Unbootable, unfixable system
  2024-02-23  7:15 bug#69319: Unbootable, unfixable system Nathan Dehnel
  2024-02-23 10:33 ` Josselin Poiret via Bug reports for GNU Guix
@ 2024-02-23 17:17 ` Nathan Dehnel
  2024-02-25  0:48   ` Nathan Dehnel
  1 sibling, 1 reply; 7+ messages in thread
From: Nathan Dehnel @ 2024-02-23 17:17 UTC (permalink / raw)
  To: 69319, ncdehnel

It seems I may have fallen for the grub luks2 compatibility issue,
which I didn't know about. I will investigate later.

On Fri, Feb 23, 2024 at 1:15 AM Nathan Dehnel <ncdehnel@gmail.com> wrote:
>
> This config results in grub rescue "unknown filesystem <uuid of my
> btrfs rootfs>" when I try to boot it. I have verified that all the
> device uuids are correct, and the bootloader, mapped-devices, and
> file-systems sections are identical in form to my other system which
> boots fine. i can mount the boot partition and unlock and mount the
> root partition manually, so they're not broken. I have no idea why
> it's not working. My guess is that reconfigure is broken inside a
> chroot somehow.
>
> (use-modules (gnu))
> (use-service-modules networking ssh sysctl shepherd base)
> (use-package-modules vpn linux)
> (use-modules (nongnu packages linux)
>             (nongnu system linux-initrd)
>             (gnu services)
>             (guix packages)
>             (gooby-channel packages baksnapper))
> (define bashrc
>    (local-file "../bashrc"))
> (define nanorc
>    (local-file "../nano/nanorc"))
> (operating-system
> (kernel linux)
>  (initrd microcode-initrd)
>  (firmware (list linux-firmware))
>  (locale "en_US.utf8")
>  (timezone "America/Chicago")
>  (keyboard-layout (keyboard-layout "us"))
>  (host-name "guixoffline")
>  (bootloader
>    (bootloader-configuration
>      (bootloader grub-efi-bootloader)
>        (targets '("/boot/efi1"))
>      (keyboard-layout keyboard-layout)))
>  (mapped-devices
>    (list (mapped-device
>            (source
>              (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
>            (target "offline1")
>            (type luks-device-mapping))
> ))
>  (file-systems
>    (cons* (file-system
>             (mount-point "/boot/efi1")
>             (device (uuid "3339-DAE2" 'fat32))
>             (type "vfat"))
>           (file-system
>             (mount-point "/")
>             (device "/dev/mapper/offline1")
>             (type "btrfs")
>             (options "compress=zlib:9")
>             (dependencies mapped-devices))
>           %base-file-systems))
>  (users (cons* (user-account
>                  (name "nathan")
>                  (comment "Nathan Dehnel")
>                  (group "users")
>                  (home-directory "/home/nathan")
>                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
>                %base-user-accounts))
>  (packages
>    (append
>            (specification->package "btrfs-progs")
>            (specification->package "parted")
>            (specification->package "mdadm")
>            (specification->package "git")
>            (specification->package "nss-certs")
>            (specification->package "nix")
>            (specification->package "efibootmgr")
>            (specification->package "smartmontools")
>            (specification->package "iotop")
>            (specification->package "bcache-tools")
>            (specification->package "lsof")
>            (specification->package "wireguard-tools")
>            (specification->package "baksnapper")
>            (specification->package "file")
>            (specification->package "rsync"))
>      %base-packages))
>  (services
>    (append
>      (list
>           (service openssh-service-type
>             (openssh-configuration
>              (permit-root-login #t)
>              (password-authentication? #t)
>              (authorized-keys
>               `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
>                 ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
>                 ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
>                 ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
> ))))
>            (service connman-service-type)
>            (service ntp-service-type)
>            (service gpm-service-type)
>            (simple-service 'nanorc etc-service-type
>                        (list `("nanorc", nanorc)))
> )
>        %base-services)))




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#69319: Unbootable, unfixable system
  2024-02-23 17:17 ` Nathan Dehnel
@ 2024-02-25  0:48   ` Nathan Dehnel
  2024-02-25  2:59     ` Hilton Chain via Bug reports for GNU Guix
  0 siblings, 1 reply; 7+ messages in thread
From: Nathan Dehnel @ 2024-02-25  0:48 UTC (permalink / raw)
  To: 69319, ncdehnel

Yeah, that was the problem.

On Fri, Feb 23, 2024 at 11:17 AM Nathan Dehnel <ncdehnel@gmail.com> wrote:
>
> It seems I may have fallen for the grub luks2 compatibility issue,
> which I didn't know about. I will investigate later.
>
> On Fri, Feb 23, 2024 at 1:15 AM Nathan Dehnel <ncdehnel@gmail.com> wrote:
> >
> > This config results in grub rescue "unknown filesystem <uuid of my
> > btrfs rootfs>" when I try to boot it. I have verified that all the
> > device uuids are correct, and the bootloader, mapped-devices, and
> > file-systems sections are identical in form to my other system which
> > boots fine. i can mount the boot partition and unlock and mount the
> > root partition manually, so they're not broken. I have no idea why
> > it's not working. My guess is that reconfigure is broken inside a
> > chroot somehow.
> >
> > (use-modules (gnu))
> > (use-service-modules networking ssh sysctl shepherd base)
> > (use-package-modules vpn linux)
> > (use-modules (nongnu packages linux)
> >             (nongnu system linux-initrd)
> >             (gnu services)
> >             (guix packages)
> >             (gooby-channel packages baksnapper))
> > (define bashrc
> >    (local-file "../bashrc"))
> > (define nanorc
> >    (local-file "../nano/nanorc"))
> > (operating-system
> > (kernel linux)
> >  (initrd microcode-initrd)
> >  (firmware (list linux-firmware))
> >  (locale "en_US.utf8")
> >  (timezone "America/Chicago")
> >  (keyboard-layout (keyboard-layout "us"))
> >  (host-name "guixoffline")
> >  (bootloader
> >    (bootloader-configuration
> >      (bootloader grub-efi-bootloader)
> >        (targets '("/boot/efi1"))
> >      (keyboard-layout keyboard-layout)))
> >  (mapped-devices
> >    (list (mapped-device
> >            (source
> >              (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
> >            (target "offline1")
> >            (type luks-device-mapping))
> > ))
> >  (file-systems
> >    (cons* (file-system
> >             (mount-point "/boot/efi1")
> >             (device (uuid "3339-DAE2" 'fat32))
> >             (type "vfat"))
> >           (file-system
> >             (mount-point "/")
> >             (device "/dev/mapper/offline1")
> >             (type "btrfs")
> >             (options "compress=zlib:9")
> >             (dependencies mapped-devices))
> >           %base-file-systems))
> >  (users (cons* (user-account
> >                  (name "nathan")
> >                  (comment "Nathan Dehnel")
> >                  (group "users")
> >                  (home-directory "/home/nathan")
> >                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
> >                %base-user-accounts))
> >  (packages
> >    (append
> >            (specification->package "btrfs-progs")
> >            (specification->package "parted")
> >            (specification->package "mdadm")
> >            (specification->package "git")
> >            (specification->package "nss-certs")
> >            (specification->package "nix")
> >            (specification->package "efibootmgr")
> >            (specification->package "smartmontools")
> >            (specification->package "iotop")
> >            (specification->package "bcache-tools")
> >            (specification->package "lsof")
> >            (specification->package "wireguard-tools")
> >            (specification->package "baksnapper")
> >            (specification->package "file")
> >            (specification->package "rsync"))
> >      %base-packages))
> >  (services
> >    (append
> >      (list
> >           (service openssh-service-type
> >             (openssh-configuration
> >              (permit-root-login #t)
> >              (password-authentication? #t)
> >              (authorized-keys
> >               `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
> >                 ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
> >                 ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
> >                 ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
> > ))))
> >            (service connman-service-type)
> >            (service ntp-service-type)
> >            (service gpm-service-type)
> >            (simple-service 'nanorc etc-service-type
> >                        (list `("nanorc", nanorc)))
> > )
> >        %base-services)))




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#69319: Unbootable, unfixable system
  2024-02-25  0:48   ` Nathan Dehnel
@ 2024-02-25  2:59     ` Hilton Chain via Bug reports for GNU Guix
  2024-02-25  5:20       ` Nathan Dehnel
  0 siblings, 1 reply; 7+ messages in thread
From: Hilton Chain via Bug reports for GNU Guix @ 2024-02-25  2:59 UTC (permalink / raw)
  To: Nathan Dehnel; +Cc: Josselin Poiret, 69319

Hi Nathan,

On Sun, 25 Feb 2024 08:48:35 +0800,
Nathan Dehnel wrote:
>
> On Fri, Feb 23, 2024 at 11:17 AM Nathan Dehnel <ncdehnel@gmail.com> wrote:
> >
> > On Fri, Feb 23, 2024 at 1:15 AM Nathan Dehnel <ncdehnel@gmail.com> wrote:
> > >
> > > This config results in grub rescue "unknown filesystem <uuid of my
> > > btrfs rootfs>" when I try to boot it. I have verified that all the
> > > device uuids are correct, and the bootloader, mapped-devices, and
> > > file-systems sections are identical in form to my other system which
> > > boots fine. i can mount the boot partition and unlock and mount the
> > > root partition manually, so they're not broken. I have no idea why
> > > it's not working. My guess is that reconfigure is broken inside a
> > > chroot somehow.
> > >
> > > (use-modules (gnu))
> > > (use-service-modules networking ssh sysctl shepherd base)
> > > (use-package-modules vpn linux)
> > > (use-modules (nongnu packages linux)
> > >             (nongnu system linux-initrd)
> > >             (gnu services)
> > >             (guix packages)
> > >             (gooby-channel packages baksnapper))
> > > (define bashrc
> > >    (local-file "../bashrc"))
> > > (define nanorc
> > >    (local-file "../nano/nanorc"))
> > > (operating-system
> > > (kernel linux)
> > >  (initrd microcode-initrd)
> > >  (firmware (list linux-firmware))
> > >  (locale "en_US.utf8")
> > >  (timezone "America/Chicago")
> > >  (keyboard-layout (keyboard-layout "us"))
> > >  (host-name "guixoffline")
> > >  (bootloader
> > >    (bootloader-configuration
> > >      (bootloader grub-efi-bootloader)
> > >        (targets '("/boot/efi1"))
> > >      (keyboard-layout keyboard-layout)))
> > >  (mapped-devices
> > >    (list (mapped-device
> > >            (source
> > >              (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
> > >            (target "offline1")
> > >            (type luks-device-mapping))
> > > ))
> > >  (file-systems
> > >    (cons* (file-system
> > >             (mount-point "/boot/efi1")
> > >             (device (uuid "3339-DAE2" 'fat32))
> > >             (type "vfat"))
> > >           (file-system
> > >             (mount-point "/")
> > >             (device "/dev/mapper/offline1")
> > >             (type "btrfs")
> > >             (options "compress=zlib:9")
> > >             (dependencies mapped-devices))
> > >           %base-file-systems))
> > >  (users (cons* (user-account
> > >                  (name "nathan")
> > >                  (comment "Nathan Dehnel")
> > >                  (group "users")
> > >                  (home-directory "/home/nathan")
> > >                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
> > >                %base-user-accounts))
> > >  (packages
> > >    (append
> > >            (specification->package "btrfs-progs")
> > >            (specification->package "parted")
> > >            (specification->package "mdadm")
> > >            (specification->package "git")
> > >            (specification->package "nss-certs")
> > >            (specification->package "nix")
> > >            (specification->package "efibootmgr")
> > >            (specification->package "smartmontools")
> > >            (specification->package "iotop")
> > >            (specification->package "bcache-tools")
> > >            (specification->package "lsof")
> > >            (specification->package "wireguard-tools")
> > >            (specification->package "baksnapper")
> > >            (specification->package "file")
> > >            (specification->package "rsync"))
> > >      %base-packages))
> > >  (services
> > >    (append
> > >      (list
> > >           (service openssh-service-type
> > >             (openssh-configuration
> > >              (permit-root-login #t)
> > >              (password-authentication? #t)
> > >              (authorized-keys
> > >               `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
> > >                 ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
> > >                 ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
> > >                 ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
> > > ))))
> > >            (service connman-service-type)
> > >            (service ntp-service-type)
> > >            (service gpm-service-type)
> > >            (simple-service 'nanorc etc-service-type
> > >                        (list `("nanorc", nanorc)))
> > > )
> > >        %base-services)))
> >
> > It seems I may have fallen for the grub luks2 compatibility issue,
> > which I didn't know about. I will investigate later.
> >
> Yeah, that was the problem.

GRUB currently doesn't support Argon2 PBKDFs, if you are going to use LUKS2, you
have to specify pbkdf2:
--8<---------------cut here---------------start------------->8---
cryptsetup --type=luks2 --pbkdf=pbkdf2
--8<---------------cut here---------------end--------------->8---

In case it's needed, I packaged a GRUB variant with Argon2 support and its
bootloader definition in my channel:
https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/packages/bootloaders.scm
https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/bootloader/grub.scm

I re-installed my system with this GRUB variant (also intended to test it)
recently, and it works just fine.

I think this bug can be closed now?




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#69319: Unbootable, unfixable system
  2024-02-25  2:59     ` Hilton Chain via Bug reports for GNU Guix
@ 2024-02-25  5:20       ` Nathan Dehnel
  2024-02-25  9:47         ` Hilton Chain via Bug reports for GNU Guix
  0 siblings, 1 reply; 7+ messages in thread
From: Nathan Dehnel @ 2024-02-25  5:20 UTC (permalink / raw)
  To: Hilton Chain; +Cc: Josselin Poiret, 69319

I tried that and it didn't work, I had to use --type=luks1

On Sat, Feb 24, 2024 at 8:59 PM Hilton Chain <hako@ultrarare.space> wrote:
>
> Hi Nathan,
>
> On Sun, 25 Feb 2024 08:48:35 +0800,
> Nathan Dehnel wrote:
> >
> > On Fri, Feb 23, 2024 at 11:17 AM Nathan Dehnel <ncdehnel@gmail.com> wrote:
> > >
> > > On Fri, Feb 23, 2024 at 1:15 AM Nathan Dehnel <ncdehnel@gmail.com> wrote:
> > > >
> > > > This config results in grub rescue "unknown filesystem <uuid of my
> > > > btrfs rootfs>" when I try to boot it. I have verified that all the
> > > > device uuids are correct, and the bootloader, mapped-devices, and
> > > > file-systems sections are identical in form to my other system which
> > > > boots fine. i can mount the boot partition and unlock and mount the
> > > > root partition manually, so they're not broken. I have no idea why
> > > > it's not working. My guess is that reconfigure is broken inside a
> > > > chroot somehow.
> > > >
> > > > (use-modules (gnu))
> > > > (use-service-modules networking ssh sysctl shepherd base)
> > > > (use-package-modules vpn linux)
> > > > (use-modules (nongnu packages linux)
> > > >             (nongnu system linux-initrd)
> > > >             (gnu services)
> > > >             (guix packages)
> > > >             (gooby-channel packages baksnapper))
> > > > (define bashrc
> > > >    (local-file "../bashrc"))
> > > > (define nanorc
> > > >    (local-file "../nano/nanorc"))
> > > > (operating-system
> > > > (kernel linux)
> > > >  (initrd microcode-initrd)
> > > >  (firmware (list linux-firmware))
> > > >  (locale "en_US.utf8")
> > > >  (timezone "America/Chicago")
> > > >  (keyboard-layout (keyboard-layout "us"))
> > > >  (host-name "guixoffline")
> > > >  (bootloader
> > > >    (bootloader-configuration
> > > >      (bootloader grub-efi-bootloader)
> > > >        (targets '("/boot/efi1"))
> > > >      (keyboard-layout keyboard-layout)))
> > > >  (mapped-devices
> > > >    (list (mapped-device
> > > >            (source
> > > >              (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
> > > >            (target "offline1")
> > > >            (type luks-device-mapping))
> > > > ))
> > > >  (file-systems
> > > >    (cons* (file-system
> > > >             (mount-point "/boot/efi1")
> > > >             (device (uuid "3339-DAE2" 'fat32))
> > > >             (type "vfat"))
> > > >           (file-system
> > > >             (mount-point "/")
> > > >             (device "/dev/mapper/offline1")
> > > >             (type "btrfs")
> > > >             (options "compress=zlib:9")
> > > >             (dependencies mapped-devices))
> > > >           %base-file-systems))
> > > >  (users (cons* (user-account
> > > >                  (name "nathan")
> > > >                  (comment "Nathan Dehnel")
> > > >                  (group "users")
> > > >                  (home-directory "/home/nathan")
> > > >                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
> > > >                %base-user-accounts))
> > > >  (packages
> > > >    (append
> > > >            (specification->package "btrfs-progs")
> > > >            (specification->package "parted")
> > > >            (specification->package "mdadm")
> > > >            (specification->package "git")
> > > >            (specification->package "nss-certs")
> > > >            (specification->package "nix")
> > > >            (specification->package "efibootmgr")
> > > >            (specification->package "smartmontools")
> > > >            (specification->package "iotop")
> > > >            (specification->package "bcache-tools")
> > > >            (specification->package "lsof")
> > > >            (specification->package "wireguard-tools")
> > > >            (specification->package "baksnapper")
> > > >            (specification->package "file")
> > > >            (specification->package "rsync"))
> > > >      %base-packages))
> > > >  (services
> > > >    (append
> > > >      (list
> > > >           (service openssh-service-type
> > > >             (openssh-configuration
> > > >              (permit-root-login #t)
> > > >              (password-authentication? #t)
> > > >              (authorized-keys
> > > >               `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
> > > >                 ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
> > > >                 ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
> > > >                 ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
> > > > ))))
> > > >            (service connman-service-type)
> > > >            (service ntp-service-type)
> > > >            (service gpm-service-type)
> > > >            (simple-service 'nanorc etc-service-type
> > > >                        (list `("nanorc", nanorc)))
> > > > )
> > > >        %base-services)))
> > >
> > > It seems I may have fallen for the grub luks2 compatibility issue,
> > > which I didn't know about. I will investigate later.
> > >
> > Yeah, that was the problem.
>
> GRUB currently doesn't support Argon2 PBKDFs, if you are going to use LUKS2, you
> have to specify pbkdf2:
> --8<---------------cut here---------------start------------->8---
> cryptsetup --type=luks2 --pbkdf=pbkdf2
> --8<---------------cut here---------------end--------------->8---
>
> In case it's needed, I packaged a GRUB variant with Argon2 support and its
> bootloader definition in my channel:
> https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/packages/bootloaders.scm
> https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/bootloader/grub.scm
>
> I re-installed my system with this GRUB variant (also intended to test it)
> recently, and it works just fine.
>
> I think this bug can be closed now?




^ permalink raw reply	[flat|nested] 7+ messages in thread

* bug#69319: Unbootable, unfixable system
  2024-02-25  5:20       ` Nathan Dehnel
@ 2024-02-25  9:47         ` Hilton Chain via Bug reports for GNU Guix
  0 siblings, 0 replies; 7+ messages in thread
From: Hilton Chain via Bug reports for GNU Guix @ 2024-02-25  9:47 UTC (permalink / raw)
  To: Nathan Dehnel; +Cc: Josselin Poiret, 69319

Hi Nathan

On Sun, 25 Feb 2024 13:20:06 +0800,
Nathan Dehnel wrote:
>
> On Sat, Feb 24, 2024 at 8:59 PM Hilton Chain <hako@ultrarare.space> wrote:
> >
[...]
> > GRUB currently doesn't support Argon2 PBKDFs, if you are going to use LUKS2, you
> > have to specify pbkdf2:
> > --8<---------------cut here---------------start------------->8---
> > cryptsetup --type=luks2 --pbkdf=pbkdf2
> > --8<---------------cut here---------------end--------------->8---
> >
> > In case it's needed, I packaged a GRUB variant with Argon2 support and its
> > bootloader definition in my channel:
> > https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/packages/bootloaders.scm
> > https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/bootloader/grub.scm
> >
> > I re-installed my system with this GRUB variant (also intended to test it)
> > recently, and it works just fine.
> >
> > I think this bug can be closed now?
>
> I tried that and it didn't work, I had to use --type=luks1

Then it might be because the ‘luks2’ module is not automatically installed to
GRUB's core image.  This should be fixed in GRUB 2.12, but we are still shipping
2.06...




^ permalink raw reply	[flat|nested] 7+ messages in thread

end of thread, other threads:[~2024-02-25  9:47 UTC | newest]

Thread overview: 7+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-02-23  7:15 bug#69319: Unbootable, unfixable system Nathan Dehnel
2024-02-23 10:33 ` Josselin Poiret via Bug reports for GNU Guix
2024-02-23 17:17 ` Nathan Dehnel
2024-02-25  0:48   ` Nathan Dehnel
2024-02-25  2:59     ` Hilton Chain via Bug reports for GNU Guix
2024-02-25  5:20       ` Nathan Dehnel
2024-02-25  9:47         ` Hilton Chain via Bug reports for GNU Guix

Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.