boot loader not installing for encrypted 64-bit

boot loader not installing for encrypted 64-bit

[Kete via]

[-- Attachment #1.1: Type: text/plain, Size: 569 bytes --]

Hello,

I've tried to install an encrypted GuixSD 64-bit on 2 different
computers, and both times, the graphical install couldn't install the
bootloader. In Qemu and on 32-bit, the bootloader installed fine. I
don't know how to fix. There's an efi directory on the flashdrive, so I
don't know what's going wrong. I have rebooted, decrypted and mounted my
partition, turned on the swap file, set the cow-store to /mnt, and
restarted the system init, and it looks like it's downloading the
packages, again.

Kete

-- 
https://emailselfdefense.fsf.org/



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

Re: boot loader not installing for encrypted 64-bit

[Kete via]

[-- Attachment #1.1: Type: text/plain, Size: 1082 bytes --]

PS – Here is the output:

error: '/gnu/store/...-grub-efi-2.02/sbin/grub-install --boot-directory
/mnt/boot --bootloader-id=Guix --efi-directory /boot/efi' exited with
status 1; output follows:

    Installing for x86_64-efi platform.
    /gnu/store/...-grub-efi-2.02/sbin/grub-install: error: failed to get
canonical path of '/boot/efi'.
   
guix system: error: failed to install bootloader
/gnu/store/...-bootloader-installer

On 2/22/20 5:42 PM, Kete via wrote:
> Hello,
>
> I've tried to install an encrypted GuixSD 64-bit on 2 different
> computers, and both times, the graphical install couldn't install the
> bootloader. In Qemu and on 32-bit, the bootloader installed fine. I
> don't know how to fix. There's an efi directory on the flashdrive, so I
> don't know what's going wrong. I have rebooted, decrypted and mounted my
> partition, turned on the swap file, set the cow-store to /mnt, and
> restarted the system init, and it looks like it's downloading the
> packages, again.
>
> Kete
>
-- 
https://emailselfdefense.fsf.org/



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

Re: boot loader not installing for encrypted 64-bit

[Kete via]

[-- Attachment #1.1: Type: text/plain, Size: 3272 bytes --]

They don't look wrong, but here are the contents of /sys/firmware/efi:

config_table, efivars/, esrt/, fw_platform_size, fw_vendor, runtime,
runtime-map/, systab, vars/

and here is my config.scm:

;; This is an operating system configuration generated
;; by the graphical installer.

(use-modules (gnu))
(use-service-modules desktop networking ssh xorg)

(operating-system
  (locale "en_US.utf8")
  (timezone "America/New_York")
  (keyboard-layout
    (keyboard-layout "us" "colemak"))
  (bootloader
    (bootloader-configuration
      (bootloader grub-efi-bootloader)
      (target "/boot/efi")
      (keyboard-layout keyboard-layout)))
  (mapped-devices
    (list (mapped-device
            (source
              (uuid "e1a31f72-4787-44f3-80dd-5be064aed1bc"))
            (target "cryptroot")
            (type luks-device-mapping))))
  (file-systems
    (cons* (file-system
             (mount-point "/")
             (device "/dev/mapper/cryptroot")
             (type "ext4")
             (dependencies mapped-devices))
           %base-file-systems))
  (host-name "ketesguix")
  (users (cons* (user-account
                  (name "kete")
                  (comment "Kete")
                  (group "users")
                  (home-directory "/home/kete")
                  (supplementary-groups
                    '("wheel" "netdev" "audio" "video")))
                %base-user-accounts))
  (packages
    (append
      (list (specification->package "nss-certs"))
      %base-packages))
  (services
    (append
      (list (service mate-desktop-service-type)
            (service openssh-service-type)
            (service tor-service-type)
            (set-xorg-configuration
              (xorg-configuration
                (keyboard-layout keyboard-layout))))
      %desktop-services)))

On 2/22/20 6:19 PM, Kete via wrote:
> PS – Here is the output:
>
> error: '/gnu/store/...-grub-efi-2.02/sbin/grub-install --boot-directory
> /mnt/boot --bootloader-id=Guix --efi-directory /boot/efi' exited with
> status 1; output follows:
>
>     Installing for x86_64-efi platform.
>     /gnu/store/...-grub-efi-2.02/sbin/grub-install: error: failed to get
> canonical path of '/boot/efi'.
>    
> guix system: error: failed to install bootloader
> /gnu/store/...-bootloader-installer
>
> On 2/22/20 5:42 PM, Kete via wrote:
>> Hello,
>>
>> I've tried to install an encrypted GuixSD 64-bit on 2 different
>> computers, and both times, the graphical install couldn't install the
>> bootloader. In Qemu and on 32-bit, the bootloader installed fine. I
>> don't know how to fix. There's an efi directory on the flashdrive, so I
>> don't know what's going wrong. I have rebooted, decrypted and mounted my
>> partition, turned on the swap file, set the cow-store to /mnt, and
>> restarted the system init, and it looks like it's downloading the
>> packages, again.
>>
>> Kete
>>
-- 
https://emailselfdefense.fsf.org/


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

Re: boot loader not installing for encrypted 64-bit

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 230 bytes --]

Kete,

Kete via 写道：
> I have rebooted, decrypted and mounted my partition
                                                   ^^^
Did you also mount your EFI System Partition on /mnt/boot/efi?

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: boot loader not installing for encrypted 64-bit

[Kete via]

[-- Attachment #1.1: Type: text/plain, Size: 4065 bytes --]

Ok, I tried running that grub-install command manually, making the
--efi-directory /mnt/boot/efi, but I got the same error. Then, I made an
efi directory in /mnt/boot, and grub-install replied something like,
"That doesn't look like an EFI partition!" Next, I decided not to make
an EFI partition and to change my config to grub-bootloader with target
"/dev/sda", and I ran the system init. Guix built a few derivations and
slowly copied a massive number of files to /mnt. Finally, it said the
bootloader was successfully installed. That worked, but I had to disable
UEFI boot and enable "legacy" boot in the BIOS.

On 2/22/20 7:23 PM, Kete via wrote:
> They don't look wrong, but here are the contents of /sys/firmware/efi:
>
> config_table, efivars/, esrt/, fw_platform_size, fw_vendor, runtime,
> runtime-map/, systab, vars/
>
> and here is my config.scm:
>
> ;; This is an operating system configuration generated
> ;; by the graphical installer.
>
> (use-modules (gnu))
> (use-service-modules desktop networking ssh xorg)
>
> (operating-system
>   (locale "en_US.utf8")
>   (timezone "America/New_York")
>   (keyboard-layout
>     (keyboard-layout "us" "colemak"))
>   (bootloader
>     (bootloader-configuration
>       (bootloader grub-efi-bootloader)
>       (target "/boot/efi")
>       (keyboard-layout keyboard-layout)))
>   (mapped-devices
>     (list (mapped-device
>             (source
>               (uuid "e1a31f72-4787-44f3-80dd-5be064aed1bc"))
>             (target "cryptroot")
>             (type luks-device-mapping))))
>   (file-systems
>     (cons* (file-system
>              (mount-point "/")
>              (device "/dev/mapper/cryptroot")
>              (type "ext4")
>              (dependencies mapped-devices))
>            %base-file-systems))
>   (host-name "ketesguix")
>   (users (cons* (user-account
>                   (name "kete")
>                   (comment "Kete")
>                   (group "users")
>                   (home-directory "/home/kete")
>                   (supplementary-groups
>                     '("wheel" "netdev" "audio" "video")))
>                 %base-user-accounts))
>   (packages
>     (append
>       (list (specification->package "nss-certs"))
>       %base-packages))
>   (services
>     (append
>       (list (service mate-desktop-service-type)
>             (service openssh-service-type)
>             (service tor-service-type)
>             (set-xorg-configuration
>               (xorg-configuration
>                 (keyboard-layout keyboard-layout))))
>       %desktop-services)))
>
> On 2/22/20 6:19 PM, Kete via wrote:
>> PS – Here is the output:
>>
>> error: '/gnu/store/...-grub-efi-2.02/sbin/grub-install --boot-directory
>> /mnt/boot --bootloader-id=Guix --efi-directory /boot/efi' exited with
>> status 1; output follows:
>>
>>     Installing for x86_64-efi platform.
>>     /gnu/store/...-grub-efi-2.02/sbin/grub-install: error: failed to get
>> canonical path of '/boot/efi'.
>>    
>> guix system: error: failed to install bootloader
>> /gnu/store/...-bootloader-installer
>>
>> On 2/22/20 5:42 PM, Kete via wrote:
>>> Hello,
>>>
>>> I've tried to install an encrypted GuixSD 64-bit on 2 different
>>> computers, and both times, the graphical install couldn't install the
>>> bootloader. In Qemu and on 32-bit, the bootloader installed fine. I
>>> don't know how to fix. There's an efi directory on the flashdrive, so I
>>> don't know what's going wrong. I have rebooted, decrypted and mounted my
>>> partition, turned on the swap file, set the cow-store to /mnt, and
>>> restarted the system init, and it looks like it's downloading the
>>> packages, again.
>>>
>>> Kete
>>>
-- 
https://emailselfdefense.fsf.org/


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

Re: boot loader not installing for encrypted 64-bit

[Kete via]

[-- Attachment #1.1: Type: text/plain, Size: 405 bytes --]

On 2/22/20 7:53 PM, Tobias Geerinckx-Rice wrote:
>> I have rebooted, decrypted and mounted my partition
>                                                   ^^^
> Did you also mount your EFI System Partition on /mnt/boot/efi?
Thanks, is that /dev/sda? I only saw /dev/sda and /dev/sda1. Maybe I
should make an EFI partion during the graphical installation.

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

Re: boot loader not installing for encrypted 64-bit

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 855 bytes --]

Kete 写道：
> On 2/22/20 7:53 PM, Tobias Geerinckx-Rice wrote:
>>> I have rebooted, decrypted and mounted my partition
>>                                                   ^^^
>> Did you also mount your EFI System Partition on /mnt/boot/efi?
> Thanks, is that /dev/sda? I only saw /dev/sda and 
> /dev/sda1. Maybe I
> should make an EFI partion during the graphical installation.

Your UEFI system won't boot without one (unless you switch to 
old-cruft-compatibility-mode or ‘CSM’ in your machine's set-up) 
and GRUB won't install without one.  So yes!

How to create, format, and mount such a partition is explained in 
the ‘Disk Partitioning’ section of the ‘Keyboard Layout and 
Networking and Partitioning’ chapter of the manual.  A few tens of 
megabytes will be more than you'll ever need.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: boot loader not installing for encrypted 64-bit

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 227 bytes --]

Kete,

Kete 写道：
> I only saw /dev/sda and /dev/sda1. Maybe I
> should make an EFI partion during the graphical installation.

Unfortunately, I'm not familiar with the graphical installer.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: boot loader not installing for encrypted 64-bit

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 558 bytes --]

Kete via 写道：
> That worked, but I had to disable UEFI boot and enable "legacy" 
> boot in the BIOS.

If this is fine for you, keep it.

> Ok, I tried running that grub-install command manually, making 
> the
> --efi-directory /mnt/boot/efi, but I got the same error.

If you would like to continue tinkering with UEFI, try invoking 
GRUB with --efi-directory /boot/efi (without changing anything 
else).  However, Guix already invokes the ‘correct’ command so 
there's likely something else not quite right.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]