[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: LUKS-encrypted root and unencrypted /boot ?
From: |
Benjamin Slade |
Subject: |
Re: LUKS-encrypted root and unencrypted /boot ? |
Date: |
Fri, 03 Aug 2018 11:05:05 -0600 |
User-agent: |
mu4e 1.1.0; emacs 26.1 |
> Do you use Libreboot?
Yes, I'm using Libreboot. Does this make a great difference over the
manufacturer firmware in this case?
> I'm unsure [using an unencrypted /boot] would help, because GRUB
> would still have to unencrypt / to access the kernel (the kernel is
> in /gnu/store).
Ah, I see. Is this an immutable design decision? It would seem good to
be able to keep the kernel in a separate space in order to avoid the
issue of extremely long unlocking times when booting.
--
Benjamin Slade - https://babbagefiles.xyz
`(pgp_fp: ,(21BA 2AE1 28F6 DF36 110A 0E9C A320 BBE8 2B52 EE19))
'(sent by mu4e on Emacs running under GNU/Linux . https://gnu.org )
`(Choose Linux ,(Choose Freedom) . https://linux.com )
Re: LUKS-encrypted root and unencrypted /boot ?, Chris Marusich, 2018/08/02