Something unrelated completely corrupted my system. dom0 got hosed and I was not able to recover. So I have reinstalled qubes from scratch, but this time I am using a software raid on 2 nvme pcie drives.
Qubes 4 set up does allow for an encrypted raid the graphical setup. It does not create an lvm. I am using a separate drive with luks and an lvm thin pool. So now I have 3 luks partitions opened on boot. / (root), swap, and secondary drive that isn't important to the OS. The way grub is set up by default now, is to have multiple "rd.luks.uuid=" parameters, one for each. Also, after each luks parameter, if one of the raid volumes, there is a "rd.md.uuid=" parameter. This works using a single luks passphrase at boot time. Command line: placeholder root=UUID=9f9879f9-b275-4313-abef-1d99ecff7810 ro rd.luks.uuid=luks-4a69493c-62a7-4c2b-8f4b-a90133d925f5 rd.luks.uuid=luks-d4d18b89-907e-47a2-bdc1-7da5096fc437 rd.luks.uuid=luks-1dfee293-9d48-470b-8b53-d10ad9b13b0b rd.md.uuid=2d63c5de:209df367:6cc0fc7e:e96b1484 rd.md.uuid=0a9b3000:21ca14f0:eea9dcd4:0fa1b693 i915.alpha_support=1 rhgb quiet rd.ykluks.hide_all_usb So now I am thinking about your setup instructions, in this scenario. >From what I've tested, multiple "rd.ykluks.uuid" and entries on the grub line, >tries to invoke multiple instances, and boot fails. I then tried a single >rd.ykluks.uuid parameter with the comma separated uuids. And keep the existing >"rd.md.uuid" parameters after that. It doesn't work. I just get a blinking cursor, no prompts or messages. I've tried removing the "luks-" prefix on the UUIDs, but still fails. If I remove the "rd.md.uuid" parameters... I do get prompted for yubikey password and it does begin to decrypt the volumes as expected. But without the raid mounting "md" parameters... it doesn't boot from there. My experience with dracut modules is very limited, but I want to test this RAID use case so your module is more robust. What should I try next? Thanks. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a1c607b0-5d1d-4e00-99e9-aa488d3212f3%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
