Mastodawn

I'm going to install #Guix on my freshly assembled PC tonight - I wanted to try and use #LUKS to encrypt my install.
I remember hearing murmurs about the grub support for LUKS improving on Guix and I want to make sure I'm using the most up-to-date method.
Does anyone have any examples, tutorials, documentation that could point me in the right direction? The Guix manual has *some* documentation, but nothing too exhaustive. (An entry in the cookbook would be welcome!)
Thanks for the help!
#linux

Show thread

aemogie

@adanskana back when i first setup guix i followed @abcdw's video series which I think had some LUKS setup. don't know if it covers the details you're looking for though, as I just skipped that part of the video (read somewhere that it made disk rw upto 50% slower, and decided i didn't care enough)

Show thread

aemogie Nov 6

@adanskana @abcdw this should be the video https://youtu.be/XOYirIzUlW8

Installing GNU Guix on encrypted btrfs

YouTube

Show thread

Ada S Nov 7

@aemogie @abcdw Cool, thanks!
I'm actually not gonna bother this time around. Apparently the performance drops are quite severe, especially on AMD cpus..
It doesn't matter too much to me anyway. The only thing I'll do is maybe airgap my master GPG key on a pen drive.
If some evildoer has my PC something's already gone very awry and I'll have bigger issues to worry about hahaha

Show thread

aemogie Nov 7

@adanskana @abcdw yup, that's what i also decided on.

tho for some middle ground, you could also keep /gnu/store unencrypted but encrypt your /home (or a persistance partition if youre using some tmpfs on root, epemeral boot stuff). that way boot is fast, programs start fast, no grub setup necessary, it's just some mount with (needed-for-boot? #f) that's encrypted. simplifies quite a bit.