From patchwork Sat Mar 2 10:25:52 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Fabio Natali X-Patchwork-Id: 61295 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 31A5D27BBE9; Sat, 2 Mar 2024 13:47:19 +0000 (GMT) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,SPF_HELO_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 2348727BBE2 for ; Sat, 2 Mar 2024 13:47:16 +0000 (GMT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rgPhL-0001yf-NV; Sat, 02 Mar 2024 08:46:43 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rgMfS-00083m-UI for guix-patches@gnu.org; Sat, 02 Mar 2024 05:32:34 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1rgMfS-00025Y-Lc for guix-patches@gnu.org; Sat, 02 Mar 2024 05:32:34 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1rgMfu-0000tc-DD for guix-patches@gnu.org; Sat, 02 Mar 2024 05:33:02 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#69507] [PATCH] doc: Fix section on LUKS support. Resent-From: Fabio Natali Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 02 Mar 2024 10:33:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 69507 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 69507@debbugs.gnu.org Cc: Fabio Natali X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.17093755413376 (code B ref -1); Sat, 02 Mar 2024 10:33:02 +0000 Received: (at submit) by debbugs.gnu.org; 2 Mar 2024 10:32:21 +0000 Received: from localhost ([127.0.0.1]:38094 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rgMfF-0000sM-19 for submit@debbugs.gnu.org; Sat, 02 Mar 2024 05:32:21 -0500 Received: from lists.gnu.org ([209.51.188.17]:57030) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rgMfA-0000s4-1s for submit@debbugs.gnu.org; Sat, 02 Mar 2024 05:32:19 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rgMeh-0007Ro-A8 for guix-patches@gnu.org; Sat, 02 Mar 2024 05:31:47 -0500 Received: from relay6-d.mail.gandi.net ([2001:4b98:dc4:8::226]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rgMeb-0000Gj-DE for guix-patches@gnu.org; Sat, 02 Mar 2024 05:31:43 -0500 Received: by mail.gandi.net (Postfix) with ESMTPSA id 386E5C0003; Sat, 2 Mar 2024 10:31:36 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fabionatali.com; s=gm1; t=1709375496; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=JTQhn5Cbd67ukmbUCqoAEUS6jAFOT9AYy1DAiuBB3XE=; b=oG3mj/h53TbL1Lkm5mQpxf+OuGYfBPOqrxBH8FaKabd+C9o26mpPWssDBJML5oCgE/lV4h +g87Bsnh4QnKr+BdG48k6s8qJE3pSoaUkT48TKkm+6hq9D3gc9lryiwmz6qhjpFt400Ytm riZ/XQdDCpSMpLbdRDc2fetJ6EYavld211wefSXtBVVt0GEyWKf64MwR9MoFAHENWdKnwe kftBOblNL6T9O5VviBbq7Y06Yes/2zMlLtmsiLdHu0L3n6rUlWozeCc9uF2PqDbymTFcfB LhehHVfWP/GabVvph/Nxo7EIbf8a1m9EG3pz62OUJbpiPPTWf2E5Ixfn6j6aEg== Date: Sat, 2 Mar 2024 10:25:52 +0000 Message-ID: X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 X-GND-Sasl: me@fabionatali.com Received-SPF: pass client-ip=2001:4b98:dc4:8::226; envelope-from=me@fabionatali.com; helo=relay6-d.mail.gandi.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Mailman-Approved-At: Sat, 02 Mar 2024 08:46:42 -0500 X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Fabio Natali X-ACL-Warn: , Fabio Natali via Guix-patches X-Patchwork-Original-From: Fabio Natali via Guix-patches via From: Fabio Natali Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * doc/guix.texi (Keyboard Layout, Networking, and Partitioning)[Disk Partitioning]: Fix section on LUKS support. Only LUKS1 is supported in Guix at the time of this commit. Contrarily to what reported in previous versions of this section, LUKS2 is not supported. --- Hi! 👋 Documentation micro-fix as per this email thread⁰. I hope it's ok, cheers, Fabio. ⁰ https://lists.gnu.org/archive/html/guix-devel/2024-03/msg00000.html. doc/guix.texi | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) base-commit: 4a0549be52f3f46fbce61342d8de30f7b83130c5 diff --git a/doc/guix.texi b/doc/guix.texi index f6476e0d81..0b4ba7e5bf 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -2727,20 +2727,20 @@ Keyboard Layout and Networking and Partitioning @code{man cryptsetup}} for more information). @quotation Warning -Note that GRUB can unlock LUKS2 devices since version 2.06, but only -supports the PBKDF2 key derivation function, which is not the default -for @command{cryptsetup luksFormat}. You can check which key derivation -function is being used by a device by running @command{cryptsetup -luksDump @var{device}}, and looking for the PBKDF field of your -keyslots. +While efforts are in progress to extend support to LUKS2, please note +that Guix only supports devices of type LUKS1 at the moment. You can +verify that your existing LUKS device is of the right type by running +@command{cryptsetup luksDump @var{device}}. Alternatively, you can +create a new LUKS1 device with @command{cryptsetup luksFormat --type +luks1 @var{device}}. @end quotation Assuming you want to store the root partition on @file{/dev/sda2}, the -command sequence to format it as a LUKS2 partition would be along these +command sequence to format it as a LUKS1 partition would be along these lines: @example -cryptsetup luksFormat --type luks2 --pbkdf pbkdf2 /dev/sda2 +cryptsetup luksFormat --type luks1 /dev/sda2 cryptsetup open /dev/sda2 my-partition mkfs.ext4 -L my-root /dev/mapper/my-partition @end example