Subject: Re: bug#25305: LUKS-encrypted root and unencrypted /boot with GuixSD 0.12.0

From: Ludovic Courtès <[email-masked]>
Date: Wed, 18 Nov 2020 18:46:49 +0100

Hi,

Danny Milosavljevic <[email-masked]> skribis:

> (It measures /boot in order to find out whether it has been tampered with or
> not)

(Off-topic.) I’d be curious to see how much of this approach makes sense
in the context of immutable deployments like Guix does.

Ludo’.