Ada S
I'm going to install #Guix on my freshly assembled PC tonight - I wanted to try and use #LUKS to encrypt my install.
I remember hearing murmurs about the grub support for LUKS improving on Guix and I want to make sure I'm using the most up-to-date method.
Does anyone have any examples, tutorials, documentation that could point me in the right direction? The Guix manual has *some* documentation, but nothing too exhaustive. (An entry in the cookbook would be welcome!)
Thanks for the help!
#linux
Nov 6 at 8:46amTuba
Show threadNoé LopezNov 6
@adanskana Good luck! I'll let you figure it out then I can finally turn encryption on my own system
Show threadaemogieNov 6
@baleine @adanskana this is so real
Show threadaemogieNov 6
@adanskana back when i first setup guix i followed @abcdw's video series which I think had some LUKS setup. don't know if it covers the details you're looking for though, as I just skipped that part of the video (read somewhere that it made disk rw upto 50% slower, and decided i didn't care enough)
Show threadaemogieNov 6
@adanskana @abcdw this should be the video https://youtu.be/XOYirIzUlW8
Installing GNU Guix on encrypted btrfs

YouTube
Show threadAda SNov 7
@aemogie @abcdw Cool, thanks!
I'm actually not gonna bother this time around. Apparently the performance drops are quite severe, especially on AMD cpus..
It doesn't matter too much to me anyway. The only thing I'll do is maybe airgap my master GPG key on a pen drive.
If some evildoer has my PC something's already gone very awry and I'll have bigger issues to worry about hahaha
Show threadaemogieNov 7

@adanskana @abcdw yup, that's what i also decided on.

tho for some middle ground, you could also keep /gnu/store unencrypted but encrypt your /home (or a persistance partition if youre using some tmpfs on root, epemeral boot stuff). that way boot is fast, programs start fast, no grub setup necessary, it's just some mount with (needed-for-boot? #f) that's encrypted. simplifies quite a bit.