Hello Zapper.

I wanted to tell you, maybe you didn’t understand me, if I can load Hyperbola (kernel init, etc.) using Grub Libreboot, this means that everything works!
The problem at this stage is to correctly configure grub.cfg so as not to receive errors when loading.

You can also look for the answer to this question and offer your own options, don’t wait until I find it!

Oh... then that's good enough for me!

Did you modify your guide so that if anyone wants to install it that way they can?

IE, I didn't know if your guide currently is modified to work.

Unless you meant it does work and can work, but it runs into errors.

https://libreboot.org/news/argon2.html#introduction

These patches import the PHC argon2 implementation into Libreboot’s version of GRUB:

    https://browse.libreboot.org/lbmk.git/c … dec95e1fd1
    https://browse.libreboot.org/lbmk.git/c … fb4eb2b3a0
    https://browse.libreboot.org/lbmk.git/c … 69e5b4b095

I wanted to tell you, maybe you didn’t understand me, if I can load Hyperbola (kernel init, etc.) using Grub Libreboot, this means that everything works!
The problem at this stage is to correctly configure grub.cfg so as not to receive errors when loading.

You can also look for the answer to this question and offer your own options, don’t wait until I find it!

We should stop using that "OpenBSD is more secure" ...
That was and is not the full motivation for Hyperbola using that as base for a fork. Yes OpenBSD has many good implementations, and no: We should look realistic on them. OpenBSD has right less sources so kernel and userspace can be reviewed and modified also more easy. That's the point.

As said: This is going off-topic. Please focus on that elementary questions and parts about this thread was created for.

They are more minmalistic which is good for security usually. I don't understand your line of thinking.

Although, I suppose it still depends on the user ultimately. IF you reckless, you could be screwed. If you not reckless, its up in the air.

Although the 2nd part is less true for most operating systems

I was ultimately told differently by emulatorman as to why he picked OpenBSD as a fork. Unless my memory is foggy.

As said: This is going off-topic. Please focus on that elementary questions and parts about this thread was created for.

Reminder: Please write guides as you like but not speaking on behalf of a whole community when you don't have asked the community, jim. You have made your point and demand clear. But you have send now several different points in different threads out, not being fully clear. Like this one: https://forums.hyperbola.info/viewtopic … 7577#p7577

If you want to offer a guidance with the software Hyperbola has? Fine. But just to make that clear: We won't add unapproved patches, also not rebuilding and updating packages just because someone said it "may work". Please do not use Hyperbola as your own platform for only your interests. Offer your tipps, your guide for sure. But not on behalf of Hyperbola like "we" as a whole community now ask for help. You ask for support and help. There is a clear difference!

Please orient on the roadmap Hyperbola has: https://wiki.hyperbola.info/doku.php?id … sd_roadmap
There is no Aargon2id and LUKS2. And before you bring in that we "need to include that": LUKS2 is also Linux-only. Simple answer: Sorry, but we do not focus on that. If you want to focus? Cool. Are there possible good working fixes without breaking the system? Okay, let's see. But as said: Roadmap is set for different parts. Hyperbola is community-oriented system, but exactly driven with system-development. That also means: You want something integrated in your installation? You need to find a way forward or test it on your own. You do not need to repeat the argumentation about "users" and your personal awaitings. That is all understood. But Hyperbola has a concrete roadmap and our goals are now:

- Version 0.4.5, reduction of number packages and the sizing of the ISO (striping)
- HyperbolaBSD

And this thread is even referenced on places for other systems and projects, keeping us busy for sure when people have questions and get in contact. When this debate is going further in that direction I have no other choice but to close this thread with underlining the reminder to create a new thread for "Aargon2id and LUKS2". The essential question stays here: Is full disk encryption possible or not? It was not the question: Is it possible with whatever newest Linux-only part people recommend. That was NOT the question and NOT part of this thread. If this is not possible to understand: It is not our task and also not mine to unravel mixed up topics like "What does Libreboot support" or "How is Canoeboot working" ... but those questions are now on the table elsewhere and mixing also within all of this. Keep it please clear and straight, not like asking everybody about whatever, this is causing only more work and binds time.

You also forgot to mention its likely that OpenBSD has a better way to do full disk encryption. IE, more secure, possibly more lightweight?

This is probably an important point for why not to put luks2 in the wiki. It rams home the fact that you likely have a better way.

If you want to offer a guidance with the software Hyperbola has? Fine. But just to make that clear: We won't add unapproved patches, also not rebuilding and updating packages just because someone said it "may work". Please do not use Hyperbola as your own platform for only your interests. Offer your tipps, your guide for sure. But not on behalf of Hyperbola like "we" as a whole community now ask for help. You ask for support and help. There is a clear difference!

Please orient on the roadmap Hyperbola has: https://wiki.hyperbola.info/doku.php?id … sd_roadmap
There is no Aargon2id and LUKS2. And before you bring in that we "need to include that": LUKS2 is also Linux-only. Simple answer: Sorry, but we do not focus on that. If you want to focus? Cool. Are there possible good working fixes without breaking the system? Okay, let's see. But as said: Roadmap is set for different parts. Hyperbola is community-oriented system, but exactly driven with system-development. That also means: You want something integrated in your installation? You need to find a way forward or test it on your own. You do not need to repeat the argumentation about "users" and your personal awaitings. That is all understood. But Hyperbola has a concrete roadmap and our goals are now:

- Version 0.4.5, reduction of number packages and the sizing of the ISO (striping)
- HyperbolaBSD

And this thread is even referenced on places for other systems and projects, keeping us busy for sure when people have questions and get in contact. When this debate is going further in that direction I have no other choice but to close this thread with underlining the reminder to create a new thread for "Aargon2id and LUKS2". The essential question stays here: Is full disk encryption possible or not? It was not the question: Is it possible with whatever newest Linux-only part people recommend. That was NOT the question and NOT part of this thread. If this is not possible to understand: It is not our task and also not mine to unravel mixed up topics like "What does Libreboot support" or "How is Canoeboot working" ... but those questions are now on the table elsewhere and mixing also within all of this. Keep it please clear and straight, not like asking everybody about whatever, this is causing only more work and binds time.

It’s very interesting what she will answer you))

cfdisk as shown in

https://wiki.hyperbola.info/doku.php?id … tion_disks

can help, though I did not yet test this. This way it may let to get free space back, though you may lose data in the partitions.

I'm using Trisquel now, though I'm thinking of switching to Hyperbola.

I liked the Trisquel graphical installer, and that it can be installed without an internet connection, though I'm still learning how to use the command line install of Hyperbola, as I do not yet know how I should set the sizes of partitions, and what these should be called. Though, to me, HyperbolaBSD looks like it may be more easy to install.

You may still be able to somehow use

if with boot does not work, as this may just put /boot
outside the encryption, I think.

Though I'm also trying to find out how to just do any Hyperbola install.

Hi all . I would like to share my experience of installing Hyperbola on T440P Libreboot 2023 https://mirror.cyberbits.eu/libreboot/s … 0625/roms/ with Full disk encryption (including /boot) /libreboot/stable/20230625/roms/

I know that this image contains blobs and I do not understand and do not share the philosophy of Libreboot)) Why introduce blobs to increase the amount of hardware .. the meaning of the project is lost ..

This example uses luksFormat --type luks1 /dev/sdb1 . Don't use Luks1 it is not safe, use Luks2+argon2id today!
Since version 2.4.0 (released August 18, 2021), cryptsetup uses Argon2id by default. You can read why in detail in this article.
https://mjg59.dreamwidth.org/66429.html

My example is just a test installation, I wanted to understand whether it would work or not.

It seems to me that a more promising test is installing Full disk encryption (including /boot) on this T400 laptop with a 4-core processor

https://thonkpeasant.xyz/guides/other/quad.html

Booting ISO from USB

root@hyperiso # cd /usr/share/kbd/consolefonts

root@hyperiso # setfonts sun12X22.psfu.gz

Now the font size is normal, you can move on))

# lsblk

# dd if=/dev/urandom   of=/dev/sdb bs=1M status=progress 

# cfdisk /dev/sdb

  ( select dos > new > enter > primary > write > yes > quit )

now we have sdb1

Connect internet

# ip -c a

# rc-service dhcpcd start

# ip link set enp0s35 up

# dhcpcd enp0s35

Cryptsetup

# pacman -Syy cryptsetup 

# rc-update add lvm boot

# rc-update add dmcrypt boot 

# modprobe dm-mod

Create the Luks partititon

# cryptsetup -v --cipher serpent-xts-plain64 --key-size 512 --hash whirlpool --iter-time 500 --use-random --verify-passphrase luksFormat --type luks1 /dev/sdb1

Existing 'crypto_LUKS' superblock signature (offset:0 bytes) on device...
Existing 'crypto_LUKS' superblock signature (offset:16... bytes) on device...
Key slot 0 created
Command successuful

Create the volume group and logical volumes

# cryptsetup open /dev/sdb1  lvm

# pvcreate /dev/mapper/lvm

# pvs

  (check)

# vgcreate matrix /dev/mapper/lvm

# vgs

(check)

# lvcreate -l +100%FREE  matrix -n rootvol

# lvs

(check)

# mkfs.ext4 /dev/mapper/matrix-rootvol

# mount  /dev/matrix/rootvol  /mnt

Create the  /boot  and   /home directories

# mkdir -p /mnt/home

# mkdir -p /mnt/boot

Install the base system

# pacstrap  /mnt    

Generate an Fstab

# genfstab -U -p /mnt >> /mnt/etc/fstab

# cat /mnt/etc/fstab

  (check)

Chroot

# arch-chroot  /mnt

Setting up clock...

Setting up time zone..

Setting up the consolefont ...

Setting up Kernel Modules

# nano /etc/mkinitcpio.conf 

MODULES=i915

HOOKS="base udev autodetect modconf block keyboard keymap consolefont encrypt lvm2 filesystems fsck shutdown" 

Update Kernel

# mkinitcpio -p linux-libre-lts

==>ERROR Hook 'encrypt'...
==>WARNING missing isci..

OK,

# pacman -S cryptsetup 
# pacman -S core/isci-lts-firmware

# mkinitcpio -p linux-libre-lts 

Setting up hostname

# echo " hyperbola" > /etc/hostname 

# nano /etc/hosts

127.0.0.1   localhost.localdomain     localhost   hyperbola
::1         localhost.localdomain     localhost   hyperbola

Set the root password

#  passwd

****************************
****************************

Installing Grub

#  pacman -S grub

# nano /etc/default/grub

GRUB_CMDLINE_LINUX="cryptdevice=/dev/sdb1:lvm"

GRUB_ENABLE_CRYPTODISK=y

# grub-install /dev/sdb

Generate grub.cfg

# grub-mkconfig -o /boot/grub/grub.cfg

Unmount all partition and reboot

# exit

# umount -R /mnt

# lvchange -an /dev/matrix/rootvol

# cryptsetup close lvm

# openrc-shutdown -p now

Everything works, there is an inconvenience, if you have two SSDs, you need to enter your SSD number manually each time (for example, you press 3), after that the system boots and you need to enter the password twice, in the wiki https://wiki.parabola. nu/Installing_Parabola_on_Libreboot_with_full_disk_encryption_(including_/boot) there is an explanation of how to change this.

I tried this but removed udev from HOOKS= and it failed to boot. This may be because I am using an old version of libreboot. Now I have to remove lvm dmcrypt and luks to start a non encypted install but I dont know how.

Only practice can answer your questions (my opinion)

1. Install Full disk encryption (including /boot ) on Virtual Machine  https://forums.hyperbola.info/viewtopic.php?id=933
2. Install Hyperbola (encryption without /boot)Libreboot T440P https://forums.hyperbola.info/viewtopic.php?id=934
3. Install Hyperbola  (GRUB on the USB) Libreboot T440P https://forums.hyperbola.info/viewtopic.php?id=937
4. Install Full disk encryption (including /boot ) on Libreboot T440P https://forums.hyperbola.info/viewtopic … 7478#p7478
5. Recommended programs after installing Hyperbola  https://forums.hyperbola.info/viewtopic.php?id=943
6. List of desktop software for Milky Way v0.4 and HyperbolaBSD https://forums.hyperbola.info/viewtopic.php?id=434

Hello Other_Cody . I also use Trisquel for other tasks, I still don't like that Trisquel uses SystemD and does not use the Libre-linux kernel by default, but that's their business)) A good alternative is https://www.gnuinos.org/

I can tell you my opinion. Don’t make sudden movements)) You will probably not have 70 or 80% of the programs that you have in Trisquel.

There are no ready-made ISOs with a graphical environment, etc.

I mostly just use my computer with programs like a web browser,
a video/music player,
an image viewer,
Wide Margin though I can also just use txt or pdf files,
some way to make programs,
and minetest 5.4.1 or at least after or at minetest 5.0.0.

Sometimes lingot, though any program that can help tune a music instrument may help, or at least use a microphone, so lingot is not needed. Also some way to record music or at least sound, though that is also not needed.

I mostly just use Mate for the wifi thing I can click on to turn the wifi on and off, and to search networks. So just using any graphical wifi on/off/search thing may help. I do not think I need to use Mate for other things, if this is even part of Mate.

I also mostly have files like
some .3gp files
.blend mostly just in minetest sometimes to edit the models
.b3d I think only in minetest as minetest uses this as the main player character model in-game.
.MOV though not many
.mp4
.wmv though not many
.avi though not many
.stl though not many
.pdf
.FCStd though not many freecad files
.ogg
.webm though not many

mostly just
.JPEG
.jpg
.bmp
.png
.js
.gif
.txt
.zip
.tar.bz2
.tar.gz
File Folders
.css
.htm
.html

Some programming files
.cpp
.py
though I do not need to use a specific language, just a "free as in freedom" supporting one, and I think both Python and C++ may both support freedom.

I see Hyperbola has VLC for video files and music files, though if Hyperbola's VLC can not play all the file formats I listed I can change them to another format.

At least one pdf reader, to read the PDFs I have.

An image viewer.

Hyperbola may have ways to decompress or unzip the compressed files I have.

I may not need the .stl or .FCStd files I have, or maybe some other program can edit them, or at least view them.

I think most I was thinking of using .stl or .FCStd files somehow with a 3d printer, though I do not have a 3d printer yet, so maybe just to view or edit them as I also may not use a 3d printer soon.

I mostly use Trisquel because Trisquel has an off-line installer, that has a graphical installer to set it up.

Though I can also learn a command line way to install an operating system.

Older versions of Trisquel may have supported something like i386, I think, as well as x86_64, so HyperbolaBSD may help with that if it will have both of those. I sometimes use 32 and 64 bit computers, I do not yet know if the 32-bit ones use i386 or i686, or something inbetween those.

I think Hyperbola has most of the things I use, and maybe a large amount more, though I do not yet know how to setup Hyperbola well using the command line as I mostly just used the graphical installer to setup Trisquel.

https://forums.hyperbola.info/viewtopic … 7440#p7440
shows

So I can somehow edit these files, to modify blender and blitz3d using only free dependencies, without using blender.

https://trisquel.info/en/users/othercody

shows

The 32-bit computers I used before had Windows XP on them. I do not know what Windows XP needed or could use, though I can check if these computers use i386 or some other 32-bit hardware.

Debian 9.6.0 works on a 32-bit computer I have, though I do not use that computer online.

Some computers I wish to install Hyperbola on are

Acer Aspire E 15
a laptop computer
it may be used online, though an offline installer can still help

Dell Inspiron 1200
a laptop computer
an offline installer can help with this one

and

Dell Dimension 2400
a desktop computer
an offline installer can help with this one
.

Maybe also more types of hardware, though I do not know what HyperbolaBSD will work on yet, or how much memory will be needed.

I think Trisquel's graphical installer also shows ways to wipe the hard drive's free space as well as encrypt the hard drive. So that is why I use 3 passwords, one for the encryption, one for root, and one of the user account. I used lsblk and saw something like

on one of the computers I'm thinking of installing Hyperbola on, this was not right after an install. I installed and removed guix at least once on this computer, though I do not know if that changes anything. It does not need guix now.

I can tell you my opinion. Don’t make sudden movements)) You will probably not have 70 or 80% of the programs that you have in Trisquel.

There are no ready-made ISOs with a graphical environment, etc.