Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Feli Flitzberg
To this original question back to me: any EFI and XBOOTLDR partitions used in this way must exist on the same block device as the intended root and usr partitions. Dracut does a fantastic job of including any tools needed to boot most any setup, including RAID devices. Most of my experience com

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Lennart Poettering
On Mo, 20.10.25 16:29, Demi Marie Obenour ([email protected]) wrote: > > This is all anchored on the drive the firmware first boots from: > > systemd-boot searches for UKI on that drive, and then invokes the UKI > > from that drive. The UKI stub code than passes a reference to the > > drive to

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Lennart Poettering
On Mo, 20.10.25 16:28, Demi Marie Obenour ([email protected]) wrote: > > LoaderDevicePartUUID reports the partition UUID of the ESP > > systemd-boot or systemd-stub first were invoked from. > > > > StubDevicePartUUID reports the partition UUID of the partition the UKI > > was invoked from (whi

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Demi Marie Obenour
On 10/20/25 16:13, Lennart Poettering wrote: > On Sa, 18.10.25 21:49, Demi Marie Obenour ([email protected]) wrote: > >> This isn't systemd-specific, but I know that at least some systemd >> developers recommend using UEFI secure boot + dm-verity, which leads >> to this problem. I also don't

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Demi Marie Obenour
On 10/20/25 16:21, Lennart Poettering wrote: > On Mo, 20.10.25 14:02, Demi Marie Obenour ([email protected]) wrote: > >> On 10/20/25 13:57, Andrei Borzenkov wrote: >>> 20.10.2025 20:33, Demi Marie Obenour wrote: On 10/19/25 11:36, Feli Flitzberg wrote: > Hi, long time watcher, first t

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Lennart Poettering
On Mo, 20.10.25 15:45, Demi Marie Obenour ([email protected]) wrote: > >> Unfortunately this isn't what is needed. Looks like UEFI variable > >> storage is the best option. > > > > Partition UUID is (supposed to be) unique for every partition, so it > > most certainly allows one to identify t

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Lennart Poettering
On Mo, 20.10.25 14:02, Demi Marie Obenour ([email protected]) wrote: > On 10/20/25 13:57, Andrei Borzenkov wrote: > > 20.10.2025 20:33, Demi Marie Obenour wrote: > >> On 10/19/25 11:36, Feli Flitzberg wrote: > >>> Hi, long time watcher, first time poster. If the bootloader supports the > >>>

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Lennart Poettering
On Sa, 18.10.25 21:49, Demi Marie Obenour ([email protected]) wrote: > This isn't systemd-specific, but I know that at least some systemd > developers recommend using UEFI secure boot + dm-verity, which leads > to this problem. I also don't know a better place to ask for help > on this. > > H

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Demi Marie Obenour
On 10/20/25 15:10, Andrei Borzenkov wrote: > 20.10.2025 21:22, Demi Marie Obenour wrote: >> On 10/20/25 14:20, Andrei Borzenkov wrote: >>> 20.10.2025 21:02, Demi Marie Obenour wrote: On 10/20/25 13:57, Andrei Borzenkov wrote: > 20.10.2025 20:33, Demi Marie Obenour wrote: >> On 10/19/25

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Andrei Borzenkov
20.10.2025 21:22, Demi Marie Obenour wrote: On 10/20/25 14:20, Andrei Borzenkov wrote: 20.10.2025 21:02, Demi Marie Obenour wrote: On 10/20/25 13:57, Andrei Borzenkov wrote: 20.10.2025 20:33, Demi Marie Obenour wrote: On 10/19/25 11:36, Feli Flitzberg wrote: Hi, long time watcher, first time

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Demi Marie Obenour
On 10/20/25 14:20, Andrei Borzenkov wrote: > 20.10.2025 21:02, Demi Marie Obenour wrote: >> On 10/20/25 13:57, Andrei Borzenkov wrote: >>> 20.10.2025 20:33, Demi Marie Obenour wrote: On 10/19/25 11:36, Feli Flitzberg wrote: > Hi, long time watcher, first time poster. If the bootloader supp

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Andrei Borzenkov
20.10.2025 21:02, Demi Marie Obenour wrote: On 10/20/25 13:57, Andrei Borzenkov wrote: 20.10.2025 20:33, Demi Marie Obenour wrote: On 10/19/25 11:36, Feli Flitzberg wrote: Hi, long time watcher, first time poster. If the bootloader supports the Discoverable Partitions Specification, all that'

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Demi Marie Obenour
On 10/20/25 13:57, Andrei Borzenkov wrote: > 20.10.2025 20:33, Demi Marie Obenour wrote: >> On 10/19/25 11:36, Feli Flitzberg wrote: >>> Hi, long time watcher, first time poster. If the bootloader supports the >>> Discoverable Partitions Specification, all that's needed is the correct >>> partiti

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Andrei Borzenkov
20.10.2025 20:33, Demi Marie Obenour wrote: On 10/19/25 11:36, Feli Flitzberg wrote: Hi, long time watcher, first time poster. If the bootloader supports the Discoverable Partitions Specification, all that's needed is the correct partition GUID assigned to every partition. After that, you don'

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Demi Marie Obenour
On 10/19/25 11:36, Feli Flitzberg wrote: > Hi, long time watcher, first time poster. If the bootloader supports the > Discoverable Partitions Specification, all that's needed is the correct > partition GUID assigned to every partition. After that, you don't need to > pass any partitions or use /

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread Demi Marie Obenour
On 10/20/25 05:57, killermoehre wrote: > Am Samstag, dem 18.10.2025 um 21:49 -0400 schrieb Demi Marie Obenour: > >> This isn't systemd-specific, but I know that at least some systemd >> developers recommend using UEFI secure boot + dm-verity, which leads >> to this problem. I also don't know a be

Re: [systemd-devel] With UEFI secure boot and dm-verity, how does one find the user data partition?

2025-10-20 Thread killermoehre
Am Samstag, dem 18.10.2025 um 21:49 -0400 schrieb Demi Marie Obenour: > This isn't systemd-specific, but I know that at least some systemd developers recommend using UEFI secure boot + dm-verity, which leads to this problem. I also don't know a better place to ask for help on this. > > How do OS