Re: [PATCH] v6 for detached headers and key files

[Denis 'GNUtoo' Carikli]

On Wed, 19 Aug 2020 13:59:57 -0500
Glenn Washburn <development@efficientek.com> wrote:

> I'm curious, are you using a virtual machine to test grub? If I
> understand correctly the above, you're using physical machines to
> test. I'm using qemu and generally testing with x86_64-efi.

I don't have a good vm setup for testing yet. I tried to create a self
contained test setup with qemu+coreboot+grub as a payload but it ended
up being too slow (probably due to my key sizes) and messy as I needed
to specify all the modules and I always missed some.

For the v6 I ended up installed grub in /usr/local and then with
grub-install + grub-mkconfig on an x86_64 machine running Coreboot and
SeaBIOS.

I then created two LVM partitions: one encrypted with the key and the
header inside, and another without a header to be opened, and I tested
by opening the later and accessing a file inside that I read with cat.

So it was more manual but I could reuse the distribution installation
and configuration I already had.

Denis.

pgpbdqdGmCnp5.pgp
Description: OpenPGP digital signature