On Wed, May 15, 2024 at 1:45 AM Chris Adams <li...@cmadams.net> wrote:
> Once upon a time, Michal Schorm <msch...@redhat.com> said:
> > On Tue, May 14, 2024 at 8:13 PM Tim via users
> > <users@lists.fedoraproject.org> wrote:
> > > Does /boot still need to be its own partition, these days?
> > > /boot/efi has to be, but that's mapped into /boot, already.
> >
> > Definitely not.
>
> It does for a variety of cases, such as an encrypted root filesystem.

I do have full disk encryption /boot included.
Or do you want your kernels to be tampered with by anyone that gets
hands onto your computer?

It is a bit more complex, but not that much.
The main trick was to automatically bake an extra decryption key into
the kernel every time it's installed, so you don't need to put it in
twice. (Once for GRUB to find the kernel, second time for kernel to be
able to touch the FS)

--

Michal Schorm
Software Engineer
Core Services - Databases Team
Red Hat

--

On Wed, May 15, 2024 at 1:45 AM Chris Adams <li...@cmadams.net> wrote:
>
> Once upon a time, Michal Schorm <msch...@redhat.com> said:
> > On Tue, May 14, 2024 at 8:13 PM Tim via users
> > <users@lists.fedoraproject.org> wrote:
> > > Does /boot still need to be its own partition, these days?
> > > /boot/efi has to be, but that's mapped into /boot, already.
> >
> > Definitely not.
>
> It does for a variety of cases, such as an encrypted root filesystem.
>
> --
> Chris Adams <li...@cmadams.net>
> --
> _______________________________________________
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
> Do not reply to spam, report it: 
> https://pagure.io/fedora-infrastructure/new_issue
--
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to