Stephen Sloan <[email protected]> writes: > I am looking for some advice. > > I'm am setting up a libreboot + whole disk encryption + guixsd laptop. > Libreboot has grub in the BIOS, which allows for encrypting the whole disk. > > According to the libreboot docs, I can make the grub config available at > /boot/grub/libreboot_grub.cfg and the grub installed on the BIOS will load > and use that config file. I've installed guixsd with --no-grub, I have > libreboot installed, and the disk encrypted, now I just need to make it > bootable!
Wow, cool! `guix system --no-grub` will actually build out grub.cfg in the store, just not write it to the actual bootloader configuration. So you can try to `find /gnu/store -maxdepth 1 -name '*grub.cfg'` and copy it in place. It will also print the location when running `reconfigure`: root@xbmc ~# guix system reconfigure --no-grub /etc/config.scm substitute: updating list of substitutes from 'https://mirror.hydra.gnu.org'... 100.0% The following derivation will be built: /gnu/store/dp0v27hgc93a18zva7wqnl5rl3h1yvm2-grub.cfg.drv /gnu/store/r2y4bn5p162pah9lqa3mqyplj09va65x-system /gnu/store/jnnzn804d2ss2vk7k8hxkzh07waj0x75-grub.cfg > I think I need to make the correct grub config file available at that > location whenever I reconfigure. I can manage the coding, but I'd like > hints on the best way to go about this with guix. I think making the <grub-configuration> field take a "copy-only?" option would be a decent fix for now. Currently the build code expects to run "grub-install", look into gnu/system/grub.scm and gnu/build/install.scm for starters. > There are some other options I've considered. I could reflash my BIOS as > part of the reconfiguration process. Or maybe I could chain-load two grub > installations, possibly with an unencrypted /boot. We don't have libreboot in Guix yet, but the ability to install it at reconfigure time would be nice. Sounds risky, though :)
signature.asc
Description: PGP signature
