> Do you use Libreboot?

Yes, I'm using Libreboot. Does this make a great difference over the
manufacturer firmware in this case?

 > I'm unsure [using an unencrypted /boot] would help, because GRUB
 > would still have to unencrypt / to access the kernel (the kernel is
 > in /gnu/store).

Ah, I see. Is this an immutable design decision?  It would seem good to
be able to keep the kernel in a separate space in order to avoid the
issue of extremely long unlocking times when booting.

--
Benjamin Slade - https://babbagefiles.xyz
  `(pgp_fp: ,(21BA 2AE1 28F6 DF36 110A 0E9C A320 BBE8 2B52 EE19))
    '(sent by mu4e on Emacs running under GNU/Linux . https://gnu.org )
       `(Choose Linux ,(Choose Freedom) . https://linux.com )

Reply via email to