[opensuse-factory] Snapper rollback with encrypted installs ( was: YaST: highlights of development sprint 30)
Hi,
On Sat, Feb 4, 2017 at 12:50 AM, Terzeus S. Dominguez
Does that mean that in the future we'll be able to use snapper rollback with an encrypted system? This was not working previously because /boot was a separate ext4 partitiion.
Not in the future. Snapper has been working with fully encrypted installs for a while now.
Does it require a special partition setup or would it 'just work' with existing ones? I have the following one: UUID=89548d6e-b673-441e-a0d6-7abeba05c07b / btrfs defaults 0 0 UUID=6ac580e2-9c42-40dc-ac59-047f8898a41b /boot ext4 acl,user_xattr 1 2 /dev/system/home /home xfs defaults 1 2 plus loads of other subvolumes. My understanding is that changes done to /boot would not be rolled back. How is this handled now? I am asking since I would not like to experiment with production machines :-) Thanks, Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sat, Feb 04, Robert Munteanu wrote:
Does it require a special partition setup or would it 'just work' with existing ones?
Of course it requires special partition setup.
I have the following one:
UUID=89548d6e-b673-441e-a0d6-7abeba05c07b / btrfs defaults 0 0 UUID=6ac580e2-9c42-40dc-ac59-047f8898a41b /boot ext4 acl,user_xattr 1 2 /dev/system/home /home xfs defaults 1 2
snapshot+rollback will never work with an extra /boot partition. It's need to be part of the root filesystem. So you have to do a fresh installation and adjust your partition layout.
My understanding is that changes done to /boot would not be rolled back. How is this handled now?
The same. There is no snapshot support for ext4, so we cannot snapshot and rollback it. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & CaaSP SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sat, Feb 4, 2017 at 3:30 PM, Thorsten Kukuk
Does it require a special partition setup or would it 'just work' with existing ones?
Of course it requires special partition setup.
I have the following one:
UUID=89548d6e-b673-441e-a0d6-7abeba05c07b / btrfs defaults 0 0 UUID=6ac580e2-9c42-40dc-ac59-047f8898a41b /boot ext4 acl,user_xattr 1 2 /dev/system/home /home xfs defaults 1 2
snapshot+rollback will never work with an extra /boot partition. It's need to be part of the root filesystem. So you have to do a fresh installation and adjust your partition layout.
Thanks, good to know. Is there any documentation about how to migrate manually to a supported setup or is it just a bad idea (TM) ? Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sat, Feb 04, Robert Munteanu wrote:
On Sat, Feb 4, 2017 at 3:30 PM, Thorsten Kukuk
wrote:
snapshot+rollback will never work with an extra /boot partition. It's need to be part of the root filesystem. So you have to do a fresh installation and adjust your partition layout.
Thanks, good to know. Is there any documentation about how to migrate manually to a supported setup or is it just a bad idea (TM) ?
I think a fresh, clean installation is faster than moving around the data and reconfigure the system. I'm not aware of any documentation. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & CaaSP SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
04.02.2017 18:34, Thorsten Kukuk пишет:
On Sat, Feb 04, Robert Munteanu wrote:
On Sat, Feb 4, 2017 at 3:30 PM, Thorsten Kukuk
wrote: snapshot+rollback will never work with an extra /boot partition. It's need to be part of the root filesystem. So you have to do a fresh installation and adjust your partition layout.
Thanks, good to know. Is there any documentation about how to migrate manually to a supported setup or is it just a bad idea (TM) ?
I think a fresh, clean installation is faster than moving around the data and reconfigure the system.
Faster than mount /dev/boot /mnt cp -a /mnt/* /boot update-bootloader --reinit ?? I beg to doubt it. You will need to create separate subvolumes for /boot/grub2/{i386-pc,x86_64-efi} though.
I'm not aware of any documentation.
Is default subvolume layout described anywhere? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sat, Feb 04, Andrei Borzenkov wrote:
04.02.2017 18:34, Thorsten Kukuk пишет:
On Sat, Feb 04, Robert Munteanu wrote:
On Sat, Feb 4, 2017 at 3:30 PM, Thorsten Kukuk
wrote: snapshot+rollback will never work with an extra /boot partition. It's need to be part of the root filesystem. So you have to do a fresh installation and adjust your partition layout.
Thanks, good to know. Is there any documentation about how to migrate manually to a supported setup or is it just a bad idea (TM) ?
I think a fresh, clean installation is faster than moving around the data and reconfigure the system.
Faster than
mount /dev/boot /mnt cp -a /mnt/* /boot update-bootloader --reinit
No, but only having /boot in the default root btrfs subvolume does not mean that your system is setup and capable of doing snapshots and rolback correctly or at all.
Is default subvolume layout described anywhere?
Yes, in the product control.xml file. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & CaaSP SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sat, Feb 4, 2017 at 5:34 PM, Thorsten Kukuk
On Sat, Feb 04, Robert Munteanu wrote:
On Sat, Feb 4, 2017 at 3:30 PM, Thorsten Kukuk
wrote: snapshot+rollback will never work with an extra /boot partition. It's need to be part of the root filesystem. So you have to do a fresh installation and adjust your partition layout.
Thanks, good to know. Is there any documentation about how to migrate manually to a supported setup or is it just a bad idea (TM) ?
I think a fresh, clean installation is faster than moving around the data and reconfigure the system. I'm not aware of any documentation.
Good, I'll schedule some time to do a resinstall. Thanks, Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
I have the following one:
UUID=89548d6e-b673-441e-a0d6-7abeba05c07b / btrfs defaults 0 0 UUID=6ac580e2-9c42-40dc-ac59-047f8898a41b /boot ext4 acl,user_xattr 1 2 /dev/system/home /home xfs defaults 1 2
snapshot+rollback will never work with an extra /boot partition. It's need to be part of the root filesystem. So you have to do a fresh installation and adjust your partition layout.
How do you have LVM-on-LUKS with a single rootfs (with /boot on the encrypted partition)? How does grub know how to boot that? -- Aleksa Sarai Software Engineer (Containers) SUSE Linux GmbH https://www.cyphar.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 4. Februar 2017 15:17:32 MEZ schrieb Aleksa Sarai
How do you have LVM-on-LUKS with a single rootfs (with /boot on the encrypted partition)?
With an extra and independent chainloader partition.
How does grub know how to boot that?
With a fixed grub.cfg pointing to the LUKS partition. Olaf -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
04.02.2017 17:17, Aleksa Sarai пишет:
How do you have LVM-on-LUKS with a single rootfs (with /boot on the encrypted partition)? How does grub know how to boot that?
Not sure I understand the question. grub knows it because when you run grub-install it detects LVM-on-LUKS and stores this information in image that is loaded on boot. Just like it does it for standalone /boot where it detects partition type, filesystem etc that are required to access it. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
04.02.2017 16:30, Thorsten Kukuk пишет:
On Sat, Feb 04, Robert Munteanu wrote:
snapshot+rollback will never work with an extra /boot partition.
I dare to claim that this is rather strong statement. With separate /boot you cannot snapshot kernels and grub. Now, grub is exempt from snapshotting anyway (it is on separate volume), so you do not lose anything. And kernels are by default multiversion, so you have safety belt here as well. So with modified multiversion configuration that keeps more kernels I do not see what exact problems you have in mind. Could you elaborate, why it will never work? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sat, Feb 04, Andrei Borzenkov wrote:
So with modified multiversion configuration that keeps more kernels I do not see what exact problems you have in mind. Could you elaborate, why it will never work?
Because the kernel is not completly in /boot. So maybe you have your old kernel binary, but there is no gurantee that you still have the corresponding kernel modules. Same for your bootloader configuration. It does not need to fit to rest of the system. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & CaaSP SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imendoerffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Sat, Feb 4, 2017 at 6:01 PM, Andrei Borzenkov
04.02.2017 16:30, Thorsten Kukuk пишет:
On Sat, Feb 04, Robert Munteanu wrote:
snapshot+rollback will never work with an extra /boot partition.
I dare to claim that this is rather strong statement.
If my memory serves me right, it was something that was posted at least once on this mailing list by Richard Brown. Bootloaders are not my strong point, so I have not taken the time to experiment and find out whether I can work around it somehow. Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (5)
-
Aleksa Sarai
-
Andrei Borzenkov
-
Olaf Hering
-
Robert Munteanu
-
Thorsten Kukuk