[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] DISCUSSION: Jookia's Libreboot+LUKS+LVM FDE patch.
From: |
Ludovic Courtès |
Subject: |
Re: [PATCH] DISCUSSION: Jookia's Libreboot+LUKS+LVM FDE patch. |
Date: |
Thu, 10 Mar 2016 17:10:09 +0100 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) |
Jookia <address@hidden> skribis:
> So I've come up with the following hack commit that effectively
> stops any sort of dependency management and adds some new targets
> for LVM and LUKS with a keyfile.
>
> Here's my current setup, take note that order of mapped devices
> matter since there's no dependency management:
>
> (mapped-devices (list (mapped-device
> (source "/dev/sda")
> (target "hdd")
> (type (luks-device-keyfile-mapping
> (local-file "/root/keyfile"))))
> (mapped-device
> (source "/dev/mapper/hdd")
> (target "matrix")
> (type lvm-device-mapping))))
>
> (file-systems (cons (file-system
> (device "/dev/mapper/matrix-root")
> (title 'device)
> (mount-point "/")
> (type "ext4"))
> %base-file-systems))
>
> (swap-devices '("/dev/mapper/matrix-swap"))
As you note, and as discussed on IRC, this is not OK because the private
key ends up being stored world-readable in the store. :-/
Am I missing the part you wanted to discuss?
Thanks,
Ludo’.
PS: I still intend to look at the patch series you sent ;-), just
prioritizing things that relate to 0.9.1.