GNU bug report logs - #25305
LUKS-encrypted root and unencrypted /boot with GuixSD 0.12.0

Previous Next

Package: guix;

Reported by: ludo <at> gnu.org (Ludovic Courtès)

Date: Fri, 30 Dec 2016 23:53:01 UTC

Severity: normal

Tags: patch

Merged with 37851

Done: Miguel Ángel Arruga Vivas <rosen644835 <at> gmail.com>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Ludovic Courtès <ludo <at> gnu.org>
To: Danny Milosavljevic <dannym <at> scratchpost.org>
Cc: 25305 <at> debbugs.gnu.org, Jonathan Brielmaier <jonathan.brielmaier <at> web.de>
Subject: bug#25305: LUKS-encrypted root and unencrypted /boot with GuixSD 0.12.0
Date: Wed, 18 Nov 2020 18:46:49 +0100

Hi,

Danny Milosavljevic <dannym <at> scratchpost.org> skribis:

> (It measures /boot in order to find out whether it has been tampered with or
> not)

(Off-topic.) I’d be curious to see how much of this approach makes sense
in the context of immutable deployments like Guix does.

Ludo’.
This bug report was last modified 4 years and 153 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.