diff options
| author | Ludovic Courtès <ludo@gnu.org> | 2015-11-04 10:27:12 +0100 |
|---|---|---|
| committer | Ludovic Courtès <ludo@gnu.org> | 2015-11-04 10:54:39 +0100 |
| commit | 316d65be0ca41c277349c4f0127513f98dbec680 (patch) | |
| tree | 305a11b7655dc9d973ac60a441022a90934d3ccf /doc | |
| parent | 5ffea4776d33e73922aa5fdbb7ac4dafbfbf15c5 (diff) | |
doc: Back up on the claim of encrypted root partitions.
Reported by 宋文武 <iyzsong@openmailbox.org>
at <https://lists.gnu.org/archive/html/guix-devel/2015-11/msg00096.html>.
* doc/guix.texi (System Installation): Comment out encrypted root
partition commands.
* gnu/system/examples/desktop.tmpl (mapped-devices): Remove.
(file-systems): Refer to the root by label.
* NEWS: Adjust.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/guix.texi | 23 |
1 files changed, 12 insertions, 11 deletions
diff --git a/doc/guix.texi b/doc/guix.texi index 7898a1d3fb0..7e5f9c774b9 100644 --- a/doc/guix.texi +++ b/doc/guix.texi | |||
| @@ -5310,23 +5310,24 @@ Setting up network access is almost always a requirement because the | |||
| 5310 | image does not contain all the software and tools that may be needed. | 5310 | image does not contain all the software and tools that may be needed. |
| 5311 | 5311 | ||
| 5312 | @item | 5312 | @item |
| 5313 | Unless this has already been done, you must partition, optionally | 5313 | Unless this has already been done, you must partition, and then format |
| 5314 | encrypt, and then format the target partitions. | 5314 | the target partition. |
| 5315 | 5315 | ||
| 5316 | Preferably, assign partitions a label so that you can easily and | 5316 | Preferably, assign partitions a label so that you can easily and |
| 5317 | reliably refer to them in @code{file-system} declarations (@pxref{File | 5317 | reliably refer to them in @code{file-system} declarations (@pxref{File |
| 5318 | Systems}). This is typically done using the @code{-L} option of | 5318 | Systems}). This is typically done using the @code{-L} option of |
| 5319 | @command{mkfs.ext4} and related commands. | 5319 | @command{mkfs.ext4} and related commands. |
| 5320 | 5320 | ||
| 5321 | A typical command sequence may be: | 5321 | @c FIXME: Uncomment this once GRUB fully supports encrypted roots. |
| 5322 | 5322 | @c A typical command sequence may be: | |
| 5323 | @example | 5323 | @c |
| 5324 | # fdisk /dev/sdX | 5324 | @c @example |
| 5325 | @dots{} Create partitions etc.@dots{} | 5325 | @c # fdisk /dev/sdX |
| 5326 | # cryptsetup luksFormat /dev/sdX1 | 5326 | @c @dots{} Create partitions etc.@dots{} |
| 5327 | # cryptsetup open --type luks /dev/sdX1 my-partition | 5327 | @c # cryptsetup luksFormat /dev/sdX1 |
| 5328 | # mkfs.ext4 -L my-root /dev/mapper/my-partition | 5328 | @c # cryptsetup open --type luks /dev/sdX1 my-partition |
| 5329 | @end example | 5329 | @c # mkfs.ext4 -L my-root /dev/mapper/my-partition |
| 5330 | @c @end example | ||
| 5330 | 5331 | ||
| 5331 | The installation image includes Parted (@pxref{Overview,,, parted, GNU | 5332 | The installation image includes Parted (@pxref{Overview,,, parted, GNU |
| 5332 | Parted User Manual}), @command{fdisk}, Cryptsetup/LUKS for disk | 5333 | Parted User Manual}), @command{fdisk}, Cryptsetup/LUKS for disk |
