HyperForum — Full-disk encryption on GRUB payload in libreboot/coreboot

Re: Full-disk encryption on GRUB payload in libreboot/coreboot

null@example.com (zapper) — Sat, 24 Oct 2020 02:14:47 +0000

i3_relativism wrote:

if the grub cfg files are not present when doing fulldisk encryption at the time of making the grub cfg file, what would be the next step to troubleshoot, also many other .d files seam to be empty is that normal? cheers in advance for any feedback.
with " grub-mkconfig -o /boot/grub/grub.cfg"
my issue is that after I do so I get this issue
"/usr/sbin/grub-mkconfig line 237: /boot/grub/grub.cfg.new"
which from my understandment is referring to the grub.d scripts
and line 237 is the following:
if test "x${grub.cfg}" != "x"; then
rm -f "${grub.cfg}.new"
oldmask=$(umask); umask 077
exec > "${grub_cfg}.new"
umask $oldmask
fi
line 237 -> exec > "${grub_cfg}.new"

I think you were supposed to do, /boot/grub.cfg
If its full disk encryption. That's how I always did it. unless something has changed.

Re: Full-disk encryption on GRUB payload in libreboot/coreboot

null@example.com (i3_relativism) — Wed, 07 Oct 2020 14:02:52 +0000

when installing a unix like system would one need to mount the swapvol before to be detected by genfstab?
in nano /etc/mkinitcpio.conf where you need to change the values on uncomented HOOKS line shouldnt the flag udev be eudev given that is the default maintain by gentoo?
when using lvm luks encryption and when creating /home and /boot directories should one do this before mounting then from /mapper or after in /mnt, and if so why?

Re: Full-disk encryption on GRUB payload in libreboot/coreboot

null@example.com (i3_relativism) — Wed, 07 Oct 2020 11:52:15 +0000

yes I did run this command:

grub-install --no-bootsector /dev/sdX

This is unrelated, but I cannot communicate with you in any other way unfortunately, I think is unproductive for you to call my eforts in improving the wiki "great wall of spam", just because they are a lot of contributions doesn't mean they are bad, also if I was you I would be careful aligning with quirilo given that he many times jumps into conclusions without any base for it, so no it wasn't me doing the supposedly unnecessary contributions to /core and /extra.

Anyway cheers for the feedback on the other matter, though.

Re: Full-disk encryption on GRUB payload in libreboot/coreboot

null@example.com (g4jc) — Tue, 06 Oct 2020 21:53:20 +0000

After installing grub, did you run grub-install? The script it is looking for should be generated by that.

Full-disk encryption on GRUB payload in libreboot/coreboot

null@example.com (i3_relativism) — Tue, 06 Oct 2020 15:23:53 +0000

if the grub cfg files are not present when doing fulldisk encryption at the time of making the grub cfg file, what would be the next step to troubleshoot, also many other .d files seam to be empty is that normal? cheers in advance for any feedback.
with " grub-mkconfig -o /boot/grub/grub.cfg"
my issue is that after I do so I get this issue
"/usr/sbin/grub-mkconfig line 237: /boot/grub/grub.cfg.new"
which from my understandment is referring to the grub.d scripts
and line 237 is the following:
if test "x${grub.cfg}" != "x"; then
rm -f "${grub.cfg}.new"
oldmask=$(umask); umask 077
exec > "${grub_cfg}.new"
umask $oldmask
fi
line 237 -> exec > "${grub_cfg}.new"