• 0 Posts
  • 13 Comments
Joined 3 years ago
cake
Cake day: July 2nd, 2023

help-circle


  • Nice, I’ll post mine as a reply since it’s very similar :)

    Work: when I started we were Centos/RHEL with some Debian, then pivoted to primarily Debian, now we have pivoted to Ubuntu.

    Work Desktop: Besides obligatory Windows I have been on Gentoo +KDE for the last 10 years, but the Chromium portage build times as well as some weird performance degradation finally became too much and I just recently switched to NixOS (with newer hardware).

    Home Server: Slackware/Gentoo for a while starting in the mid 2000’s, then stuck with FreeBSD for over a decade. Since then I’ve just happy with Raspian on an rpi, but looking at switching it to NixOS

    Home Desktop: Wasn’t much of a category for me and usually just a Windows junkie at home, but recently been very pleased with SteamOS








  • So if you want to use systemd-boot as the bootloader you have to (apparently) install the systemd-utils package. Or you can just use GRUB / efistub.

    Edit: looks like groche beat me to it 😁

    It’s probably been 4 years since I last had to rebuild my Gentoo, but I would be very surprised if there weren’t good OpenRC instructions. I built mine with systemd and Gentoo handbook instructions always felt like ‘Are you sure you don’t want to use OpenRC? Ok, here are the systemd steps I guess’



  • But how to get the OS to recognize it?

    My approach for doing this in Gentoo with an encrypted /home is to configure dracut to make a slightly customized initrd.

    Thanks to dracut modules, not too much configuration is needed - it prompts on boot for the password to decrypt, and then fstab is just configured to mount the decrypted uuid.

    Someone else mentioned using multiple key slots, but I think this is your only real secure option.

    Edit: on second thought, you may be able to get this to work in grub simply by adding rd.luks.uuid=xxx as a kernel boot parameter, and then having the decrypted /dev/mapper uuid in fstab for /home