From mboxrd@z Thu Jan 1 00:00:00 1970 From: Chris Marusich Subject: Re: dvorak Date: Mon, 07 May 2018 22:44:42 -0700 Message-ID: <87po26puph.fsf@gmail.com> References: <8736z35h6b.fsf@santanas.co.za> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43704) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fFvQj-0001Yx-6f for help-guix@gnu.org; Tue, 08 May 2018 01:44:54 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fFvQi-0001dQ-6o for help-guix@gnu.org; Tue, 08 May 2018 01:44:53 -0400 Received: from mail-pf0-x22c.google.com ([2607:f8b0:400e:c00::22c]:43809) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fFvQi-0001dM-1I for help-guix@gnu.org; Tue, 08 May 2018 01:44:52 -0400 Received: by mail-pf0-x22c.google.com with SMTP id j20so9099016pff.10 for ; Mon, 07 May 2018 22:44:51 -0700 (PDT) In-Reply-To: <8736z35h6b.fsf@santanas.co.za> (Divan Santana's message of "Mon, 07 May 2018 22:45:00 +0200") List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Divan Santana Cc: help-guix --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Divan Santana writes: > While talking about luks, is it normal/best practice to have the > passphrase on start up ask twice? Once for boot vol at grub, and once > for /root I suppose? Yes, entering the LUKS volume passphrase twice is normal, though I would love to hear about ways to improve it. As I understand it, both GRUB and Linux have to unlock the LUKS volume, and they do not by default coordinate in any way - that is why you have to enter it two times. I don't know how to arrange for a password to be entered only once, but I imagine that it may be possible, with varying degrees of security depending on the chosen solution. =2D-=20 Chris --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEy/WXVcvn5+/vGD+x3UCaFdgiRp0FAlrxOUoACgkQ3UCaFdgi Rp0gKQ/+M150f/xfA8sNOm4OhiwaRAZkciR1jGhQug2Tu/ysmnw0DOuW3aW1TeJs eBuARDeZjCMxRQ5eJcBnVTV2TLGrUOb07YwJMEmSUtR6C1+l+cd5VwoiWTlWjj/V ckJHl9IoG8c31zRQyAV+AQM2VpvuVwqga3vTZ+MVJeONw9WTAn5ifzInv1SFpm7y DAf+Of/RF3oHcNTox0UwpvUKr0qmIsXVUZrJKIfyFssRTUnOu6+qK5Pg2/mB8OYQ IIBP2+2MxOFYyB5pDel2fjiLhg8r2Flw1y3gD57rcvfhL7bH9uqj88vt9LsNrX8U ecSqnsaTX1Fnr2EBaRIxfHbNlVDFTuyfmiqQyPhNVlnffiJe/dcZ7Kjp03m36F2X 0kvGe0+v8LrFDwJAdsJ0F5yaqg4A3LA4zlD2mSt56APHmECTN3gflAPjUjHRetOn 0b2j3DA65FWT3eQJ0lMonB4x+bQX9BDGCwKI/0yMIuQNwZ0WVCX6UdTAVxEcWT5d +OG3Ly0FcJ1aowgOD3tjNFpb1hqD8nkdRkrtAfmjZYOq6P6FzmYsge2z+z6iSoqq 9oy8YsHkz2bA26wmlNlXVB/tQgXPHsE2eQX+EyqUqKMtV9QenYyX1KO4kdKVPBAY 5EvsgQ61l7IOJXUuPjgaqx6pMtkWPK2gjGZkCp5zBctUiA7ZrFc= =p4qL -----END PGP SIGNATURE----- --=-=-=--