[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Libreboot + WDE + GuixSD: Need some advice

From: Marius Bakke
Subject: Re: Libreboot + WDE + GuixSD: Need some advice
Date: Wed, 12 Apr 2017 17:21:33 +0200
User-agent: Notmuch/0.24.1 ( Emacs/25.1.1 (x86_64-unknown-linux-gnu)

Stephen Sloan <address@hidden> writes:

> I am looking for some advice.
> I'm am setting up a libreboot + whole disk encryption + guixsd laptop.
> Libreboot has grub in the BIOS, which allows for encrypting the whole disk.
> According to the libreboot docs, I can make the grub config available at
> /boot/grub/libreboot_grub.cfg and the grub installed on the BIOS will load
> and use that config file.  I've installed guixsd with --no-grub, I have
> libreboot installed, and the disk encrypted, now I just need to make it
> bootable!

Wow, cool!

`guix system --no-grub` will actually build out grub.cfg in the store,
just not write it to the actual bootloader configuration. So you can try
to `find /gnu/store -maxdepth 1 -name '*grub.cfg'` and copy it in place.

It will also print the location when running `reconfigure`:

address@hidden ~# guix system reconfigure --no-grub /etc/config.scm
substitute: updating list of substitutes from ''... 
The following derivation will be built:

> I think I need to make the correct grub config file available at that
> location whenever I reconfigure.  I can manage the coding, but I'd like
> hints on the best way to go about this with guix.

I think making the <grub-configuration> field take a "copy-only?" option
would be a decent fix for now. Currently the build code expects to run
"grub-install", look into gnu/system/grub.scm and gnu/build/install.scm
for starters.

> There are some other options I've considered.  I could reflash my BIOS as
> part of the reconfiguration process.  Or maybe I could chain-load two grub
> installations, possibly with an unencrypted /boot.

We don't have libreboot in Guix yet, but the ability to install it at
reconfigure time would be nice. Sounds risky, though :)

Attachment: signature.asc
Description: PGP signature

reply via email to

[Prev in Thread] Current Thread [Next in Thread]