[Libreboot] Parabola install & Grub

[Andreas Kuss]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I installed parabola with full disk encryption on my T400 until the
point where I have to boot from Grub manually. This is getting hard
(or maybe impossible?) because of my bootscreen
(https://i.imgur.com/LqAdmmK.jpg). I can't see what I type in the
console and if it's working. I used a usqwerty-vesafb rom for
flashing, which is not my actual keyboard layout.

Instead of booting manually I thought I'd install Grub with a few
changes in /etc/default/grub.
I added
GRUB_CRYPTODISK_ENABLED=y
and I added the kernel parameter
GRUB_CMDLINE_LINUX=“cryptdevice=/dev/sda1:root root=/dev/matrix/rootvol“

I used fdisk when creating the LUKS partition. Using cfdisk does not
leave enough disk space (see here:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1059827) for
Grub. You either have to install it outside the MBR, resize (if
possible) or start all over again.

I installed Grub with the hope of being recognized automatically by
libreboot. This works with Trisquel 7 (which I did not encrypt) but
not (yet) with Parabola (?).

I am asking myself if I should be able to start Parabola with FDE this
way? When would I have to type in the keyphrase in Grub? I wouldn't
know because of the trouble with my bootscreen. I can use the
different options at bootscreen, though.

I used the latest Parabola live ISO (2015.08.01) because I couldn't
get a wireless connection with an older ISO (probably kernel related).
I used a wiped SSD to try out. Trisquel is on another HDD.

Is this the right approach? Should I try with Grub on an USB stick?
Any comments or ideas are much appreciated.

Cheers
Andreas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJVx0deAAoJEDvFbiItFuuSxbMH/iamN7Hd6hJ/4mb64FDw57aq
i/CNSLHKpHKcEayT41/wRI1QVKF4/0e7Ud8y3tgKNlsw+jqFCriXaN481mQ0tABJ
ls3JQ/baLkoPQUjQcLEtQ12M4HLBT+o8iscOdmayZEA6hsN32NUYMCbHrcxtRIJZ
4QckhCoQXH2xeDZHIUxB00qwou2TOQUB6l29FCArzHIKOBtZ5GReqLxn3NmjKBqT
phFn/vsd4GJYuNLupi1Jo/9mFqwQm+eUaQT3N+nITMA2BmPeF0cA7dXOnD8ynCdg
X/mAOpSncuelAhaeFgWIR8JAY4wZXR9kBvDIMdH7p3dumkpHAq4wjTGeYVjijzo=
=w9cz
-----END PGP SIGNATURE-----