[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Libreboot + WDE + GuixSD: Need some advice
From: |
Marius Bakke |
Subject: |
Re: Libreboot + WDE + GuixSD: Need some advice |
Date: |
Wed, 12 Apr 2017 17:21:33 +0200 |
User-agent: |
Notmuch/0.24.1 (https://notmuchmail.org) Emacs/25.1.1 (x86_64-unknown-linux-gnu) |
Stephen Sloan <address@hidden> writes:
> I am looking for some advice.
>
> I'm am setting up a libreboot + whole disk encryption + guixsd laptop.
> Libreboot has grub in the BIOS, which allows for encrypting the whole disk.
>
> According to the libreboot docs, I can make the grub config available at
> /boot/grub/libreboot_grub.cfg and the grub installed on the BIOS will load
> and use that config file. I've installed guixsd with --no-grub, I have
> libreboot installed, and the disk encrypted, now I just need to make it
> bootable!
Wow, cool!
`guix system --no-grub` will actually build out grub.cfg in the store,
just not write it to the actual bootloader configuration. So you can try
to `find /gnu/store -maxdepth 1 -name '*grub.cfg'` and copy it in place.
It will also print the location when running `reconfigure`:
address@hidden ~# guix system reconfigure --no-grub /etc/config.scm
substitute: updating list of substitutes from 'https://mirror.hydra.gnu.org'...
100.0%
The following derivation will be built:
/gnu/store/dp0v27hgc93a18zva7wqnl5rl3h1yvm2-grub.cfg.drv
/gnu/store/r2y4bn5p162pah9lqa3mqyplj09va65x-system
/gnu/store/jnnzn804d2ss2vk7k8hxkzh07waj0x75-grub.cfg
> I think I need to make the correct grub config file available at that
> location whenever I reconfigure. I can manage the coding, but I'd like
> hints on the best way to go about this with guix.
I think making the <grub-configuration> field take a "copy-only?" option
would be a decent fix for now. Currently the build code expects to run
"grub-install", look into gnu/system/grub.scm and gnu/build/install.scm
for starters.
> There are some other options I've considered. I could reflash my BIOS as
> part of the reconfiguration process. Or maybe I could chain-load two grub
> installations, possibly with an unencrypted /boot.
We don't have libreboot in Guix yet, but the ability to install it at
reconfigure time would be nice. Sounds risky, though :)
signature.asc
Description: PGP signature