Dne 06.12.2015 v 12:01 Basil Chupin napsal(a):
On 06/12/15 17:23, Andrei Borzenkov wrote:
06.12.2015 01:49, Richard Brown пишет:
On 5 December 2015 at 19:50, Bruno Friedmann <bruno@ioda-net.ch> wrote:
On Thursday 26 November 2015 20.49:32 Andrei Borzenkov wrote:
26.11.2015 20:38, Robby Engelmann пишет:
sorry, I overlooked that...
boot is on ext4. root, home and swap is a lukscrypt lvm setup with root btrfs and home xfs.
Boot from snapshot is offered only if /boot is on btrfs (actually check is probably wrong, it should check that /boot is on the same filesystem and subvolume as /, but that is another matter).
Then this is a huge limitation on what we offer. TW is advertised with the rollback feature, as a recover measure.
In the new world of sensitive information and privacy, this is a really a problem. People that need to have / encrypted for whatever reason (they are all valid: list of package, database content etc) are just left on the side.
What kind of effort we can do to have grub2 asking luks keypass when starting ? and then being able to decrypt the snapshots ... LUKS support was added to GRUB2 more than 4 years ago.
Oh dear.
Can't be done
Please get your facts right.
Oh dear, oh dear.
Installing on encrypted LVM has been possible for quite some time (and a lot of people do it and we even fix bug reports related to it). What is missing is easy to use YaST support to install on simple encrypted partition without jumping through manual encrypted LVM creation hoops. Given demand, it should really be exposed as check box on top level partition proposal.
Like another functionality that GRUB2 offers but YaST not - installing on arbitrary Linux MD array, not only on exactly 2 disks RAID1.
Are you sure about all this? Richard is listed as the SUSE's QA Engineer (not simply a programmer but Engineer!) afteral.
Ooosh...tippy-toeing on egg shells I am on your behalf.......
Please consider that not all people involved in development of Tumbleweed or Leap, subscribed to this ml are interested in your witty remarks or ad hominems - perhaps you might consider moving them to more suitable place. Cheers Martin Pluskal