Package: wnpp
Severity: wishlist
X-Debbugs-Cc: systemd Maintainers 
<pkg-systemd-maintain...@lists.alioth.debian.org>, Tianon Gravi 
<tia...@debian.org>, Pete Batard <p...@akeo.ie>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

* Package name    : efifs
  Version         : 1.11
  Upstream Contact: Pete Batard <p...@akeo.ie>
* URL             : https://github.com/pbatard/EfiFs
* License         : GPL-3.0
  Programming Lang: C
  Description     : EFI File System Drivers


TLDR: enhances EFI boot managers such as systemd-boot and rEFInd with
support for all the filesystems GRUB2 supports.

Long version:
Currently, GRUB2 seems to be the predominant boot manager. It is somewhat
modern, feature-full, and supports many file systems, especially BTRFS.
It supported LUKS1 since at least ~2014, but LUKS2 support
was completly missing until ~2022, but even nowadays,
only PBKDF2 Key Derivation Function is supported,
and Argon2 KDF is still not supported, with no obvious way forward.

Additionally, GRUB2's decryption performance leaves a lot to be desired.
It is order[s] of magnitude slower than native one.

Now, there are some alternatives:
1) rEFInd:
   * Lacks LUKS support
   * Has EFI driver for BTRFS 
(`/usr/share/refind/refind/drivers_x64/btrfs_x64.efi`)
2) systemd-boot
   * Has full LUKS2 support, including Argon2, with good performance
   * Lacks EFI driver for BTRFS
2) efifs
   * EFI drivers providing FS support, based on GRUB2

I.e.
|                                   | GRUB2 | rEFInd | systemd-boot | efifs |
|-----------------------------------|-------|--------|--------------|-------|
| BTRFS                             | YES   | YES    |  NO          | YES   |
| LUKS1 support (= encrypted /boot) | YES   |  NO    | YES          | n/a   |
| LUKS2 support                     | YES   |  NO    | YES          | n/a   |
| Argon2id support                  |  NO   | n/a    | YES          | n/a   |
| Native decryption perf            |  NO   | n/a    | YES          | n/a   |

(Yes, bootloader + EFI drivers need to be *NOT* in /boot,
 but in a separete FAT32 EFI System Partition.)

Now, one could/should be able to achieve BTRFS support in systemd-boot
via simply using rEFInd's driver, however i suspect it may be a good
idea to package efifs so that systemd-boot and rEFInd could achieve
feature parity in file system support with GRUB2.

Roman.


-----BEGIN PGP SIGNATURE-----
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=tbgB
-----END PGP SIGNATURE-----

Reply via email to