root encryption

root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 316 bytes --]

Given this excerpt from the sample desktop installation conf

  (mapped-devices
   (list (mapped-device
          (source (uuid "12345678-1234-1234-1234-123456789abc"))
          (target "the-root-device")
          (type luks-device-mapping))))

I wonder: what' s the type for a non Luks encrypted root partition ?

[-- Attachment #2: Type: text/html, Size: 421 bytes --]

Re: root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 13 bytes --]

ok, ok: ext4

[-- Attachment #2: Type: text/html, Size: 77 bytes --]

Re: root encryption

[Ludovic Courtès]

Catonano <catonano@gmail.com> skribis:

> Given this excerpt from the sample desktop installation conf
>
>   (mapped-devices
>    (list (mapped-device
>           (source (uuid "12345678-1234-1234-1234-123456789abc"))
>           (target "the-root-device")
>           (type luks-device-mapping))))
>
> I wonder: what' s the type for a non Luks encrypted root partition ?

If the root partition is not encrypted (and not RAID or anything like
that), you don’t need to declare a “mapped device” for it.  All you need
is to declare a file system in the ‘file-systems’ field.

HTH!

Ludo’.

Re: root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 850 bytes --]

2017-02-09 16:40 GMT+01:00 Ludovic Courtès <ludo@gnu.org>:

> Catonano <catonano@gmail.com> skribis:
>
>
>
> If the root partition is not encrypted (and not RAID or anything like
> that), you don’t need to declare a “mapped device” for it.  All you need
> is to declare a file system in the ‘file-systems’ field.
>
> HTH!
>

Yes, it did help ! In fact I was able to start the process

BUT

it didn' t end correctly :-/

Installing for i386-pc platform
grub-install: error: cannot find a GRUB drive for /dev/sd1. Check your
device.map.
guix-system: failed to install GRUB on device '/dev/sd1'


As far as I understand my platform should be x86_64
Why did it select i386 ?

Also: what did I mess up with grub ?

/dev/sda1 is a small partiton mapped to /boot

Is that wrong ? Does grub require to be on '/' ?

[-- Attachment #2: Type: text/html, Size: 1438 bytes --]

Re: root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 248 bytes --]

I just realized I have mistyped the grub configuration

(bootloader (grub-configuration (device "/dev/sd1")))

it should probably be

(bootloader (grub-configuration (device "/dev/sda1")))

or

(bootloader (grub-configuration (device "/dev/sda")))

[-- Attachment #2: Type: text/html, Size: 451 bytes --]

Re: root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 103 bytes --]

I managed to make the process end with no errors but then no operating
system to boot can be found :-/

[-- Attachment #2: Type: text/html, Size: 132 bytes --]

Re: root encryption

[Ludovic Courtès]

Catonano <catonano@gmail.com> skribis:

> I just realized I have mistyped the grub configuration
>
> (bootloader (grub-configuration (device "/dev/sd1")))
>
> it should probably be
>
> (bootloader (grub-configuration (device "/dev/sda1")))
>
> or
>
> (bootloader (grub-configuration (device "/dev/sda")))

“/dev/sda” is the correct thing: it will install GRUB to the MBR of that
device.

Ludo’.

Re: root encryption

[Ludovic Courtès]

Howdy!

Catonano <catonano@gmail.com> skribis:

> I managed to make the process end with no errors but then no operating
> system to boot can be found :-/

Do you have more info?

If you are on a UEFI system, the process is a bit more involved and not
really documented right now, but that’d be an opportunity to document
it.  :-)

Ludo’.

Re: root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 603 bytes --]

2017-02-10 10:47 GMT+01:00 Ludovic Courtès <ludo@gnu.org>:

> Howdy!
>
> Catonano <catonano@gmail.com> skribis:
>
> > I managed to make the process end with no errors but then no operating
> > system to boot can be found :-/
>
> Do you have more info?
>
> If you are on a UEFI system, the process is a bit more involved and not
> really documented right now, but that’d be an opportunity to document
> it.  :-)
>

UEFI is available on this machine but it' s disabled

"Legacy" boot is enabled instead.

Is there any more information I can provide ?
Just let me know

Thanks !

[-- Attachment #2: Type: text/html, Size: 1091 bytes --]

Re: root encryption

[Ludovic Courtès]

Catonano <catonano@gmail.com> skribis:

> 2017-02-10 10:47 GMT+01:00 Ludovic Courtès <ludo@gnu.org>:
>
>> Howdy!
>>
>> Catonano <catonano@gmail.com> skribis:
>>
>> > I managed to make the process end with no errors but then no operating
>> > system to boot can be found :-/
>>
>> Do you have more info?
>>
>> If you are on a UEFI system, the process is a bit more involved and not
>> really documented right now, but that’d be an opportunity to document
>> it.  :-)
>>
>
> UEFI is available on this machine but it' s disabled
>
> "Legacy" boot is enabled instead.

On my HP laptop, “legacy” boot wouldn’t actually do what it’s supposed
to do; I had to use UEFI.

> Is there any more information I can provide ?

What’s happening exactly: do you see the GRUB screen?  Or do you just
get an error message from the BIOS/UEFI thing?  What other relevant
messages or clues are there?

Ludo’.

Re: root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 1484 bytes --]

2017-02-10 11:07 GMT+01:00 Ludovic Courtès <ludo@gnu.org>:

> Catonano <catonano@gmail.com> skribis:
>
> > 2017-02-10 10:47 GMT+01:00 Ludovic Courtès <ludo@gnu.org>:
> >
> >> Howdy!
> >>
> >> Catonano <catonano@gmail.com> skribis:
> >>
> >> > I managed to make the process end with no errors but then no operating
> >> > system to boot can be found :-/
> >>
> >> Do you have more info?
> >>
> >> If you are on a UEFI system, the process is a bit more involved and not
> >> really documented right now, but that’d be an opportunity to document
> >> it.  :-)
> >>
> >
> > UEFI is available on this machine but it' s disabled
> >
> > "Legacy" boot is enabled instead.
>
> On my HP laptop, “legacy” boot wouldn’t actually do what it’s supposed
> to do; I had to use UEFI.
>

Ah :-/


>
> > Is there any more information I can provide ?
>
> What’s happening exactly: do you see the GRUB screen?  Or do you just
> get an error message from the BIOS/UEFI thing?  What other relevant
> messages or clues are there?
>

No, I don' t see the grub screen

A black screen with a white writing comes up immediately

The writing says: "Operation System not found"
On the second line, under the capital T there' s a cursor blinking

If I press a key the Bios screen comes back. The Bios screen used to select
a boot device

If I select the hard drive where GuixSD should be, the black screen with
white writing comes back

And so on

[-- Attachment #2: Type: text/html, Size: 2398 bytes --]

Re: root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 399 bytes --]

2017-02-10 11:17 GMT+01:00 Catonano <catonano@gmail.com>:




>
> On my HP laptop, “legacy” boot wouldn’t actually do what it’s supposed
>> to do; I had to use UEFI.
>>
>
> Ah :-/
>

I tried to activate the UEFI thing and under UEFI the only boot option
available is through network.

No usb pen and no hard drive

This is with both secure boot activated and disactivated

[-- Attachment #2: Type: text/html, Size: 1000 bytes --]

Re: root encryption

[Catonano]

[-- Attachment #1: Type: text/plain, Size: 379 bytes --]

2017-02-10 12:14 GMT+01:00 Catonano <catonano@gmail.com>:

> 2017-02-10 11:17 GMT+01:00 Catonano <catonano@gmail.com>:
>
>
>
>
>>
>> On my HP laptop, “legacy” boot wouldn’t actually do what it’s supposed
>>> to do; I had to use UEFI.
>>>
>>
>> Ah :-/
>>
>
>
Could this be relevant ?

https://lists.gnu.org/archive/html/guix-devel/2016-06/msg00666.html

[-- Attachment #2: Type: text/html, Size: 1426 bytes --]

Re: root encryption

[Ludovic Courtès]

Catonano <catonano@gmail.com> skribis:

> 2017-02-10 12:14 GMT+01:00 Catonano <catonano@gmail.com>:
>
>> 2017-02-10 11:17 GMT+01:00 Catonano <catonano@gmail.com>:
>>
>>
>>
>>
>>>
>>> On my HP laptop, “legacy” boot wouldn’t actually do what it’s supposed
>>>> to do; I had to use UEFI.
>>>>
>>>
>>> Ah :-/
>>>
>>
>>
> Could this be relevant ?
>
> https://lists.gnu.org/archive/html/guix-devel/2016-06/msg00666.html

Yes, but these patches have been applied in the meantime.

I wrote about my experience here:

  https://lists.gnu.org/archive/html/guix-devel/2017-01/msg00537.html

HTH!
Ludo’.