On 17 December 2015 at 19:48, Thorsten Kukuk <kukuk@suse.de> wrote:
Hi Richard,
On Thu, Dec 17, Richard Brown wrote:
Hi Thorsten,
On 17 December 2015 at 12:55, Thorsten Kukuk <kukuk@suse.de> wrote:
Ok, since I already told Richard that I don't think that his analysis is fully correct, here now a short description how to setup btrfs, snapshots and rollback with full root filesystem encryption on openSUSE Leap 42.1:
- Use GPT disk label - In the partitioner, select encrypted LVM, btrfs for the root filesystem and make sure that the snapshot checkbox is activated. - Install.
To do the rollback: Select the approbiate snapshot in the grub2 menu or call "snapper rollback <id>" on the commandline. Both works.
And yes, due to old legacy code, it is currently not possible to do this without LVM. But we will work on this.
Thorsten
Thank you for the feedback, but I'm very disappointed to report that even following your instructions to the letter, the resulting system does not have Boot to Snapshot working
The steps I took are as follows
First - started with a nice blank disk (dd if=/dev/zero to wipe it all out) Gave it a GPT partition table Confirmed the GPT partition table with parted -l
Model: ATA SanDisk SD7SB3Q2 (scsi) Disk /dev/sda: 256GB Sector size (logical/physical): 512B/512B Partition Table: gpt
Booted from a USB stick - tested with both Leap 42.1 and Tumbleweed In the partitioner, I clicked on encrypted LVM, btrfs for the root filesystem, and snapshots were ticked This results in a system with the following partition configuration /dev/sda1 156MB FAT mounted as /boot/efi /dev/sda2 400MB btrfs mounted as /boot
Why is there a /boot partition? I don't get that on my testsystem in the office. Of course, with an extra /boot partition, this will not work. Independent of, if LVM is encrypted or not.
It's there because YaST put it there :) Andrei's advice was correct, repeating the same steps (fresh gpt label on disk > click on LVM + encryption with btrfs + snapshot) with my system set to use Legacy BIOS results in a system with a BIOS/Grub partition and an LVM group that contains root and swap This differs from my previously reported UEFI results where YaST produces a setup with /boot/efi, /boot, and an LVM group containing root and swap This (incorrect?) setup is the only proposal available with LVM+Encryption when booting UEFI, regardless of SecureBoot or not Collecting logs and such for a decent bug report now - thanks to all for the advice that has helped narrow this down -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org