GNU bug report logs - #69319
Unbootable, unfixable system

Previous Next

Package: guix;

Reported by: Nathan Dehnel <ncdehnel <at> gmail.com>

Date: Fri, 23 Feb 2024 07:17:02 UTC

Severity: normal

To reply to this bug, email your comments to 69319 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-guix <at> gnu.org:
bug#69319; Package guix. (Fri, 23 Feb 2024 07:17:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Nathan Dehnel <ncdehnel <at> gmail.com>:
New bug report received and forwarded. Copy sent to bug-guix <at> gnu.org. (Fri, 23 Feb 2024 07:17:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Nathan Dehnel <ncdehnel <at> gmail.com>
To: bug-guix <bug-guix <at> gnu.org>
Subject: Unbootable, unfixable system
Date: Fri, 23 Feb 2024 01:15:41 -0600
This config results in grub rescue "unknown filesystem <uuid of my
btrfs rootfs>" when I try to boot it. I have verified that all the
device uuids are correct, and the bootloader, mapped-devices, and
file-systems sections are identical in form to my other system which
boots fine. i can mount the boot partition and unlock and mount the
root partition manually, so they're not broken. I have no idea why
it's not working. My guess is that reconfigure is broken inside a
chroot somehow.

(use-modules (gnu))
(use-service-modules networking ssh sysctl shepherd base)
(use-package-modules vpn linux)
(use-modules (nongnu packages linux)
            (nongnu system linux-initrd)
            (gnu services)
            (guix packages)
            (gooby-channel packages baksnapper))
(define bashrc
   (local-file "../bashrc"))
(define nanorc
   (local-file "../nano/nanorc"))
(operating-system
(kernel linux)
 (initrd microcode-initrd)
 (firmware (list linux-firmware))
 (locale "en_US.utf8")
 (timezone "America/Chicago")
 (keyboard-layout (keyboard-layout "us"))
 (host-name "guixoffline")
 (bootloader
   (bootloader-configuration
     (bootloader grub-efi-bootloader)
       (targets '("/boot/efi1"))
     (keyboard-layout keyboard-layout)))
 (mapped-devices
   (list (mapped-device
           (source
             (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
           (target "offline1")
           (type luks-device-mapping))
))
 (file-systems
   (cons* (file-system
            (mount-point "/boot/efi1")
            (device (uuid "3339-DAE2" 'fat32))
            (type "vfat"))
          (file-system
            (mount-point "/")
            (device "/dev/mapper/offline1")
            (type "btrfs")
            (options "compress=zlib:9")
            (dependencies mapped-devices))
          %base-file-systems))
 (users (cons* (user-account
                 (name "nathan")
                 (comment "Nathan Dehnel")
                 (group "users")
                 (home-directory "/home/nathan")
                 (supplementary-groups '("wheel" "netdev" "audio" "video")))
               %base-user-accounts))
 (packages
   (append
           (specification->package "btrfs-progs")
           (specification->package "parted")
           (specification->package "mdadm")
           (specification->package "git")
           (specification->package "nss-certs")
           (specification->package "nix")
           (specification->package "efibootmgr")
           (specification->package "smartmontools")
           (specification->package "iotop")
           (specification->package "bcache-tools")
           (specification->package "lsof")
           (specification->package "wireguard-tools")
           (specification->package "baksnapper")
           (specification->package "file")
           (specification->package "rsync"))
     %base-packages))
 (services
   (append
     (list
          (service openssh-service-type
            (openssh-configuration
             (permit-root-login #t)
             (password-authentication? #t)
             (authorized-keys
              `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
                ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
                ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
                ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
))))
           (service connman-service-type)
           (service ntp-service-type)
           (service gpm-service-type)
           (simple-service 'nanorc etc-service-type
                       (list `("nanorc", nanorc)))
)
       %base-services)))




Information forwarded to bug-guix <at> gnu.org:
bug#69319; Package guix. (Fri, 23 Feb 2024 10:34:02 GMT) Full text and rfc822 format available.

Message #8 received at 69319 <at> debbugs.gnu.org (full text, mbox):

From: Josselin Poiret <dev <at> jpoiret.xyz>
To: Nathan Dehnel <ncdehnel <at> gmail.com>, 69319 <at> debbugs.gnu.org
Subject: Re: bug#69319: Unbootable, unfixable system
Date: Fri, 23 Feb 2024 11:33:16 +0100
[Message part 1 (text/plain, inline)]
Hi Nathan,

Nathan Dehnel <ncdehnel <at> gmail.com> writes:

> This config results in grub rescue "unknown filesystem <uuid of my
> btrfs rootfs>" when I try to boot it. I have verified that all the
> device uuids are correct, and the bootloader, mapped-devices, and
> file-systems sections are identical in form to my other system which
> boots fine. i can mount the boot partition and unlock and mount the
> root partition manually, so they're not broken. I have no idea why
> it's not working. My guess is that reconfigure is broken inside a
> chroot somehow.

I see you're using LUKS.  Is it LUKS1 or LUKS2?  LUKS2 unfortunately
doesn't work at present, because we're still on Grub 2.06.

Best,
-- 
Josselin Poiret
[signature.asc (application/pgp-signature, inline)]

Information forwarded to bug-guix <at> gnu.org:
bug#69319; Package guix. (Fri, 23 Feb 2024 17:18:02 GMT) Full text and rfc822 format available.

Message #11 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Nathan Dehnel <ncdehnel <at> gmail.com>
To: bug-guix <bug-guix <at> gnu.org>, Nathan Dehnel <ncdehnel <at> gmail.com>
Subject: Re: Unbootable, unfixable system
Date: Fri, 23 Feb 2024 11:17:04 -0600
It seems I may have fallen for the grub luks2 compatibility issue,
which I didn't know about. I will investigate later.

On Fri, Feb 23, 2024 at 1:15 AM Nathan Dehnel <ncdehnel <at> gmail.com> wrote:
>
> This config results in grub rescue "unknown filesystem <uuid of my
> btrfs rootfs>" when I try to boot it. I have verified that all the
> device uuids are correct, and the bootloader, mapped-devices, and
> file-systems sections are identical in form to my other system which
> boots fine. i can mount the boot partition and unlock and mount the
> root partition manually, so they're not broken. I have no idea why
> it's not working. My guess is that reconfigure is broken inside a
> chroot somehow.
>
> (use-modules (gnu))
> (use-service-modules networking ssh sysctl shepherd base)
> (use-package-modules vpn linux)
> (use-modules (nongnu packages linux)
>             (nongnu system linux-initrd)
>             (gnu services)
>             (guix packages)
>             (gooby-channel packages baksnapper))
> (define bashrc
>    (local-file "../bashrc"))
> (define nanorc
>    (local-file "../nano/nanorc"))
> (operating-system
> (kernel linux)
>  (initrd microcode-initrd)
>  (firmware (list linux-firmware))
>  (locale "en_US.utf8")
>  (timezone "America/Chicago")
>  (keyboard-layout (keyboard-layout "us"))
>  (host-name "guixoffline")
>  (bootloader
>    (bootloader-configuration
>      (bootloader grub-efi-bootloader)
>        (targets '("/boot/efi1"))
>      (keyboard-layout keyboard-layout)))
>  (mapped-devices
>    (list (mapped-device
>            (source
>              (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
>            (target "offline1")
>            (type luks-device-mapping))
> ))
>  (file-systems
>    (cons* (file-system
>             (mount-point "/boot/efi1")
>             (device (uuid "3339-DAE2" 'fat32))
>             (type "vfat"))
>           (file-system
>             (mount-point "/")
>             (device "/dev/mapper/offline1")
>             (type "btrfs")
>             (options "compress=zlib:9")
>             (dependencies mapped-devices))
>           %base-file-systems))
>  (users (cons* (user-account
>                  (name "nathan")
>                  (comment "Nathan Dehnel")
>                  (group "users")
>                  (home-directory "/home/nathan")
>                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
>                %base-user-accounts))
>  (packages
>    (append
>            (specification->package "btrfs-progs")
>            (specification->package "parted")
>            (specification->package "mdadm")
>            (specification->package "git")
>            (specification->package "nss-certs")
>            (specification->package "nix")
>            (specification->package "efibootmgr")
>            (specification->package "smartmontools")
>            (specification->package "iotop")
>            (specification->package "bcache-tools")
>            (specification->package "lsof")
>            (specification->package "wireguard-tools")
>            (specification->package "baksnapper")
>            (specification->package "file")
>            (specification->package "rsync"))
>      %base-packages))
>  (services
>    (append
>      (list
>           (service openssh-service-type
>             (openssh-configuration
>              (permit-root-login #t)
>              (password-authentication? #t)
>              (authorized-keys
>               `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
>                 ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
>                 ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
>                 ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
> ))))
>            (service connman-service-type)
>            (service ntp-service-type)
>            (service gpm-service-type)
>            (simple-service 'nanorc etc-service-type
>                        (list `("nanorc", nanorc)))
> )
>        %base-services)))




Information forwarded to bug-guix <at> gnu.org:
bug#69319; Package guix. (Sun, 25 Feb 2024 00:52:02 GMT) Full text and rfc822 format available.

Message #14 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Nathan Dehnel <ncdehnel <at> gmail.com>
To: bug-guix <bug-guix <at> gnu.org>, Nathan Dehnel <ncdehnel <at> gmail.com>
Subject: Re: Unbootable, unfixable system
Date: Sat, 24 Feb 2024 18:48:35 -0600
Yeah, that was the problem.

On Fri, Feb 23, 2024 at 11:17 AM Nathan Dehnel <ncdehnel <at> gmail.com> wrote:
>
> It seems I may have fallen for the grub luks2 compatibility issue,
> which I didn't know about. I will investigate later.
>
> On Fri, Feb 23, 2024 at 1:15 AM Nathan Dehnel <ncdehnel <at> gmail.com> wrote:
> >
> > This config results in grub rescue "unknown filesystem <uuid of my
> > btrfs rootfs>" when I try to boot it. I have verified that all the
> > device uuids are correct, and the bootloader, mapped-devices, and
> > file-systems sections are identical in form to my other system which
> > boots fine. i can mount the boot partition and unlock and mount the
> > root partition manually, so they're not broken. I have no idea why
> > it's not working. My guess is that reconfigure is broken inside a
> > chroot somehow.
> >
> > (use-modules (gnu))
> > (use-service-modules networking ssh sysctl shepherd base)
> > (use-package-modules vpn linux)
> > (use-modules (nongnu packages linux)
> >             (nongnu system linux-initrd)
> >             (gnu services)
> >             (guix packages)
> >             (gooby-channel packages baksnapper))
> > (define bashrc
> >    (local-file "../bashrc"))
> > (define nanorc
> >    (local-file "../nano/nanorc"))
> > (operating-system
> > (kernel linux)
> >  (initrd microcode-initrd)
> >  (firmware (list linux-firmware))
> >  (locale "en_US.utf8")
> >  (timezone "America/Chicago")
> >  (keyboard-layout (keyboard-layout "us"))
> >  (host-name "guixoffline")
> >  (bootloader
> >    (bootloader-configuration
> >      (bootloader grub-efi-bootloader)
> >        (targets '("/boot/efi1"))
> >      (keyboard-layout keyboard-layout)))
> >  (mapped-devices
> >    (list (mapped-device
> >            (source
> >              (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
> >            (target "offline1")
> >            (type luks-device-mapping))
> > ))
> >  (file-systems
> >    (cons* (file-system
> >             (mount-point "/boot/efi1")
> >             (device (uuid "3339-DAE2" 'fat32))
> >             (type "vfat"))
> >           (file-system
> >             (mount-point "/")
> >             (device "/dev/mapper/offline1")
> >             (type "btrfs")
> >             (options "compress=zlib:9")
> >             (dependencies mapped-devices))
> >           %base-file-systems))
> >  (users (cons* (user-account
> >                  (name "nathan")
> >                  (comment "Nathan Dehnel")
> >                  (group "users")
> >                  (home-directory "/home/nathan")
> >                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
> >                %base-user-accounts))
> >  (packages
> >    (append
> >            (specification->package "btrfs-progs")
> >            (specification->package "parted")
> >            (specification->package "mdadm")
> >            (specification->package "git")
> >            (specification->package "nss-certs")
> >            (specification->package "nix")
> >            (specification->package "efibootmgr")
> >            (specification->package "smartmontools")
> >            (specification->package "iotop")
> >            (specification->package "bcache-tools")
> >            (specification->package "lsof")
> >            (specification->package "wireguard-tools")
> >            (specification->package "baksnapper")
> >            (specification->package "file")
> >            (specification->package "rsync"))
> >      %base-packages))
> >  (services
> >    (append
> >      (list
> >           (service openssh-service-type
> >             (openssh-configuration
> >              (permit-root-login #t)
> >              (password-authentication? #t)
> >              (authorized-keys
> >               `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
> >                 ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
> >                 ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
> >                 ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
> > ))))
> >            (service connman-service-type)
> >            (service ntp-service-type)
> >            (service gpm-service-type)
> >            (simple-service 'nanorc etc-service-type
> >                        (list `("nanorc", nanorc)))
> > )
> >        %base-services)))




Information forwarded to bug-guix <at> gnu.org:
bug#69319; Package guix. (Sun, 25 Feb 2024 03:08:02 GMT) Full text and rfc822 format available.

Message #17 received at 69319 <at> debbugs.gnu.org (full text, mbox):

From: Hilton Chain <hako <at> ultrarare.space>
To: Nathan Dehnel <ncdehnel <at> gmail.com>
Cc: Josselin Poiret <dev <at> jpoiret.xyz>, 69319 <at> debbugs.gnu.org
Subject: Re: bug#69319: Unbootable, unfixable system
Date: Sun, 25 Feb 2024 10:59:20 +0800
Hi Nathan,

On Sun, 25 Feb 2024 08:48:35 +0800,
Nathan Dehnel wrote:
>
> On Fri, Feb 23, 2024 at 11:17 AM Nathan Dehnel <ncdehnel <at> gmail.com> wrote:
> >
> > On Fri, Feb 23, 2024 at 1:15 AM Nathan Dehnel <ncdehnel <at> gmail.com> wrote:
> > >
> > > This config results in grub rescue "unknown filesystem <uuid of my
> > > btrfs rootfs>" when I try to boot it. I have verified that all the
> > > device uuids are correct, and the bootloader, mapped-devices, and
> > > file-systems sections are identical in form to my other system which
> > > boots fine. i can mount the boot partition and unlock and mount the
> > > root partition manually, so they're not broken. I have no idea why
> > > it's not working. My guess is that reconfigure is broken inside a
> > > chroot somehow.
> > >
> > > (use-modules (gnu))
> > > (use-service-modules networking ssh sysctl shepherd base)
> > > (use-package-modules vpn linux)
> > > (use-modules (nongnu packages linux)
> > >             (nongnu system linux-initrd)
> > >             (gnu services)
> > >             (guix packages)
> > >             (gooby-channel packages baksnapper))
> > > (define bashrc
> > >    (local-file "../bashrc"))
> > > (define nanorc
> > >    (local-file "../nano/nanorc"))
> > > (operating-system
> > > (kernel linux)
> > >  (initrd microcode-initrd)
> > >  (firmware (list linux-firmware))
> > >  (locale "en_US.utf8")
> > >  (timezone "America/Chicago")
> > >  (keyboard-layout (keyboard-layout "us"))
> > >  (host-name "guixoffline")
> > >  (bootloader
> > >    (bootloader-configuration
> > >      (bootloader grub-efi-bootloader)
> > >        (targets '("/boot/efi1"))
> > >      (keyboard-layout keyboard-layout)))
> > >  (mapped-devices
> > >    (list (mapped-device
> > >            (source
> > >              (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
> > >            (target "offline1")
> > >            (type luks-device-mapping))
> > > ))
> > >  (file-systems
> > >    (cons* (file-system
> > >             (mount-point "/boot/efi1")
> > >             (device (uuid "3339-DAE2" 'fat32))
> > >             (type "vfat"))
> > >           (file-system
> > >             (mount-point "/")
> > >             (device "/dev/mapper/offline1")
> > >             (type "btrfs")
> > >             (options "compress=zlib:9")
> > >             (dependencies mapped-devices))
> > >           %base-file-systems))
> > >  (users (cons* (user-account
> > >                  (name "nathan")
> > >                  (comment "Nathan Dehnel")
> > >                  (group "users")
> > >                  (home-directory "/home/nathan")
> > >                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
> > >                %base-user-accounts))
> > >  (packages
> > >    (append
> > >            (specification->package "btrfs-progs")
> > >            (specification->package "parted")
> > >            (specification->package "mdadm")
> > >            (specification->package "git")
> > >            (specification->package "nss-certs")
> > >            (specification->package "nix")
> > >            (specification->package "efibootmgr")
> > >            (specification->package "smartmontools")
> > >            (specification->package "iotop")
> > >            (specification->package "bcache-tools")
> > >            (specification->package "lsof")
> > >            (specification->package "wireguard-tools")
> > >            (specification->package "baksnapper")
> > >            (specification->package "file")
> > >            (specification->package "rsync"))
> > >      %base-packages))
> > >  (services
> > >    (append
> > >      (list
> > >           (service openssh-service-type
> > >             (openssh-configuration
> > >              (permit-root-login #t)
> > >              (password-authentication? #t)
> > >              (authorized-keys
> > >               `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
> > >                 ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
> > >                 ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
> > >                 ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
> > > ))))
> > >            (service connman-service-type)
> > >            (service ntp-service-type)
> > >            (service gpm-service-type)
> > >            (simple-service 'nanorc etc-service-type
> > >                        (list `("nanorc", nanorc)))
> > > )
> > >        %base-services)))
> >
> > It seems I may have fallen for the grub luks2 compatibility issue,
> > which I didn't know about. I will investigate later.
> >
> Yeah, that was the problem.

GRUB currently doesn't support Argon2 PBKDFs, if you are going to use LUKS2, you
have to specify pbkdf2:
--8<---------------cut here---------------start------------->8---
cryptsetup --type=luks2 --pbkdf=pbkdf2
--8<---------------cut here---------------end--------------->8---

In case it's needed, I packaged a GRUB variant with Argon2 support and its
bootloader definition in my channel:
https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/packages/bootloaders.scm
https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/bootloader/grub.scm

I re-installed my system with this GRUB variant (also intended to test it)
recently, and it works just fine.

I think this bug can be closed now?




Information forwarded to bug-guix <at> gnu.org:
bug#69319; Package guix. (Sun, 25 Feb 2024 05:22:01 GMT) Full text and rfc822 format available.

Message #20 received at 69319 <at> debbugs.gnu.org (full text, mbox):

From: Nathan Dehnel <ncdehnel <at> gmail.com>
To: Hilton Chain <hako <at> ultrarare.space>
Cc: Josselin Poiret <dev <at> jpoiret.xyz>, 69319 <at> debbugs.gnu.org
Subject: Re: bug#69319: Unbootable, unfixable system
Date: Sat, 24 Feb 2024 23:20:06 -0600
I tried that and it didn't work, I had to use --type=luks1

On Sat, Feb 24, 2024 at 8:59 PM Hilton Chain <hako <at> ultrarare.space> wrote:
>
> Hi Nathan,
>
> On Sun, 25 Feb 2024 08:48:35 +0800,
> Nathan Dehnel wrote:
> >
> > On Fri, Feb 23, 2024 at 11:17 AM Nathan Dehnel <ncdehnel <at> gmail.com> wrote:
> > >
> > > On Fri, Feb 23, 2024 at 1:15 AM Nathan Dehnel <ncdehnel <at> gmail.com> wrote:
> > > >
> > > > This config results in grub rescue "unknown filesystem <uuid of my
> > > > btrfs rootfs>" when I try to boot it. I have verified that all the
> > > > device uuids are correct, and the bootloader, mapped-devices, and
> > > > file-systems sections are identical in form to my other system which
> > > > boots fine. i can mount the boot partition and unlock and mount the
> > > > root partition manually, so they're not broken. I have no idea why
> > > > it's not working. My guess is that reconfigure is broken inside a
> > > > chroot somehow.
> > > >
> > > > (use-modules (gnu))
> > > > (use-service-modules networking ssh sysctl shepherd base)
> > > > (use-package-modules vpn linux)
> > > > (use-modules (nongnu packages linux)
> > > >             (nongnu system linux-initrd)
> > > >             (gnu services)
> > > >             (guix packages)
> > > >             (gooby-channel packages baksnapper))
> > > > (define bashrc
> > > >    (local-file "../bashrc"))
> > > > (define nanorc
> > > >    (local-file "../nano/nanorc"))
> > > > (operating-system
> > > > (kernel linux)
> > > >  (initrd microcode-initrd)
> > > >  (firmware (list linux-firmware))
> > > >  (locale "en_US.utf8")
> > > >  (timezone "America/Chicago")
> > > >  (keyboard-layout (keyboard-layout "us"))
> > > >  (host-name "guixoffline")
> > > >  (bootloader
> > > >    (bootloader-configuration
> > > >      (bootloader grub-efi-bootloader)
> > > >        (targets '("/boot/efi1"))
> > > >      (keyboard-layout keyboard-layout)))
> > > >  (mapped-devices
> > > >    (list (mapped-device
> > > >            (source
> > > >              (uuid "14930dad-016d-4b59-b7d8-d5af2c33f4b0"))
> > > >            (target "offline1")
> > > >            (type luks-device-mapping))
> > > > ))
> > > >  (file-systems
> > > >    (cons* (file-system
> > > >             (mount-point "/boot/efi1")
> > > >             (device (uuid "3339-DAE2" 'fat32))
> > > >             (type "vfat"))
> > > >           (file-system
> > > >             (mount-point "/")
> > > >             (device "/dev/mapper/offline1")
> > > >             (type "btrfs")
> > > >             (options "compress=zlib:9")
> > > >             (dependencies mapped-devices))
> > > >           %base-file-systems))
> > > >  (users (cons* (user-account
> > > >                  (name "nathan")
> > > >                  (comment "Nathan Dehnel")
> > > >                  (group "users")
> > > >                  (home-directory "/home/nathan")
> > > >                  (supplementary-groups '("wheel" "netdev" "audio" "video")))
> > > >                %base-user-accounts))
> > > >  (packages
> > > >    (append
> > > >            (specification->package "btrfs-progs")
> > > >            (specification->package "parted")
> > > >            (specification->package "mdadm")
> > > >            (specification->package "git")
> > > >            (specification->package "nss-certs")
> > > >            (specification->package "nix")
> > > >            (specification->package "efibootmgr")
> > > >            (specification->package "smartmontools")
> > > >            (specification->package "iotop")
> > > >            (specification->package "bcache-tools")
> > > >            (specification->package "lsof")
> > > >            (specification->package "wireguard-tools")
> > > >            (specification->package "baksnapper")
> > > >            (specification->package "file")
> > > >            (specification->package "rsync"))
> > > >      %base-packages))
> > > >  (services
> > > >    (append
> > > >      (list
> > > >           (service openssh-service-type
> > > >             (openssh-configuration
> > > >              (permit-root-login #t)
> > > >              (password-authentication? #t)
> > > >              (authorized-keys
> > > >               `(("root" ,(local-file "ssh/root-gentoodesktop.pub"))
> > > >                 ("root" ,(local-file "ssh/baksnapper-gentoodesktop.pub"))
> > > >                 ("root" ,(local-file "ssh/baksnapper-gentooserver.pub"))
> > > >                 ("root" ,(local-file "ssh/nathan-guixlaptop.pub"))
> > > > ))))
> > > >            (service connman-service-type)
> > > >            (service ntp-service-type)
> > > >            (service gpm-service-type)
> > > >            (simple-service 'nanorc etc-service-type
> > > >                        (list `("nanorc", nanorc)))
> > > > )
> > > >        %base-services)))
> > >
> > > It seems I may have fallen for the grub luks2 compatibility issue,
> > > which I didn't know about. I will investigate later.
> > >
> > Yeah, that was the problem.
>
> GRUB currently doesn't support Argon2 PBKDFs, if you are going to use LUKS2, you
> have to specify pbkdf2:
> --8<---------------cut here---------------start------------->8---
> cryptsetup --type=luks2 --pbkdf=pbkdf2
> --8<---------------cut here---------------end--------------->8---
>
> In case it's needed, I packaged a GRUB variant with Argon2 support and its
> bootloader definition in my channel:
> https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/packages/bootloaders.scm
> https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/bootloader/grub.scm
>
> I re-installed my system with this GRUB variant (also intended to test it)
> recently, and it works just fine.
>
> I think this bug can be closed now?




Information forwarded to bug-guix <at> gnu.org:
bug#69319; Package guix. (Sun, 25 Feb 2024 09:48:02 GMT) Full text and rfc822 format available.

Message #23 received at 69319 <at> debbugs.gnu.org (full text, mbox):

From: Hilton Chain <hako <at> ultrarare.space>
To: Nathan Dehnel <ncdehnel <at> gmail.com>
Cc: Josselin Poiret <dev <at> jpoiret.xyz>, 69319 <at> debbugs.gnu.org
Subject: Re: bug#69319: Unbootable, unfixable system
Date: Sun, 25 Feb 2024 17:47:07 +0800
Hi Nathan

On Sun, 25 Feb 2024 13:20:06 +0800,
Nathan Dehnel wrote:
>
> On Sat, Feb 24, 2024 at 8:59 PM Hilton Chain <hako <at> ultrarare.space> wrote:
> >
[...]
> > GRUB currently doesn't support Argon2 PBKDFs, if you are going to use LUKS2, you
> > have to specify pbkdf2:
> > --8<---------------cut here---------------start------------->8---
> > cryptsetup --type=luks2 --pbkdf=pbkdf2
> > --8<---------------cut here---------------end--------------->8---
> >
> > In case it's needed, I packaged a GRUB variant with Argon2 support and its
> > bootloader definition in my channel:
> > https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/packages/bootloaders.scm
> > https://github.com/rakino/Rosenthal/blob/trunk/rosenthal/bootloader/grub.scm
> >
> > I re-installed my system with this GRUB variant (also intended to test it)
> > recently, and it works just fine.
> >
> > I think this bug can be closed now?
>
> I tried that and it didn't work, I had to use --type=luks1

Then it might be because the ‘luks2’ module is not automatically installed to
GRUB's core image.  This should be fixed in GRUB 2.12, but we are still shipping
2.06...




This bug report was last modified 68 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.