summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorLudovic Courtès <ludo@gnu.org>2015-11-04 10:27:12 +0100
committerLudovic Courtès <ludo@gnu.org>2015-11-04 10:54:39 +0100
commit316d65be0ca41c277349c4f0127513f98dbec680 (patch)
tree305a11b7655dc9d973ac60a441022a90934d3ccf /doc
parent5ffea4776d33e73922aa5fdbb7ac4dafbfbf15c5 (diff)
doc: Back up on the claim of encrypted root partitions.
Reported by 宋文武 <iyzsong@openmailbox.org> at <https://lists.gnu.org/archive/html/guix-devel/2015-11/msg00096.html>. * doc/guix.texi (System Installation): Comment out encrypted root partition commands. * gnu/system/examples/desktop.tmpl (mapped-devices): Remove. (file-systems): Refer to the root by label. * NEWS: Adjust.
Diffstat (limited to 'doc')
-rw-r--r--doc/guix.texi23
1 files changed, 12 insertions, 11 deletions
diff --git a/doc/guix.texi b/doc/guix.texi
index 7898a1d3fb0..7e5f9c774b9 100644
--- a/doc/guix.texi
+++ b/doc/guix.texi
@@ -5310,23 +5310,24 @@ Setting up network access is almost always a requirement because the
5310image does not contain all the software and tools that may be needed. 5310image does not contain all the software and tools that may be needed.
5311 5311
5312@item 5312@item
5313Unless this has already been done, you must partition, optionally 5313Unless this has already been done, you must partition, and then format
5314encrypt, and then format the target partitions. 5314the target partition.
5315 5315
5316Preferably, assign partitions a label so that you can easily and 5316Preferably, assign partitions a label so that you can easily and
5317reliably refer to them in @code{file-system} declarations (@pxref{File 5317reliably refer to them in @code{file-system} declarations (@pxref{File
5318Systems}). This is typically done using the @code{-L} option of 5318Systems}). This is typically done using the @code{-L} option of
5319@command{mkfs.ext4} and related commands. 5319@command{mkfs.ext4} and related commands.
5320 5320
5321A typical command sequence may be: 5321@c FIXME: Uncomment this once GRUB fully supports encrypted roots.
5322 5322@c A typical command sequence may be:
5323@example 5323@c
5324# fdisk /dev/sdX 5324@c @example
5325@dots{} Create partitions etc.@dots{} 5325@c # fdisk /dev/sdX
5326# cryptsetup luksFormat /dev/sdX1 5326@c @dots{} Create partitions etc.@dots{}
5327# cryptsetup open --type luks /dev/sdX1 my-partition 5327@c # cryptsetup luksFormat /dev/sdX1
5328# mkfs.ext4 -L my-root /dev/mapper/my-partition 5328@c # cryptsetup open --type luks /dev/sdX1 my-partition
5329@end example 5329@c # mkfs.ext4 -L my-root /dev/mapper/my-partition
5330@c @end example
5330 5331
5331The installation image includes Parted (@pxref{Overview,,, parted, GNU 5332The installation image includes Parted (@pxref{Overview,,, parted, GNU
5332Parted User Manual}), @command{fdisk}, Cryptsetup/LUKS for disk 5333Parted User Manual}), @command{fdisk}, Cryptsetup/LUKS for disk