On Wed, May 15, 2024 at 1:45 AM Chris Adams <linux@xxxxxxxxxxx> wrote: > Once upon a time, Michal Schorm <mschorm@xxxxxxxxxx> said: > > On Tue, May 14, 2024 at 8:13 PM Tim via users > > <users@xxxxxxxxxxxxxxxxxxxxxxx> wrote: > > > Does /boot still need to be its own partition, these days? > > > /boot/efi has to be, but that's mapped into /boot, already. > > > > Definitely not. > > It does for a variety of cases, such as an encrypted root filesystem. I do have full disk encryption /boot included. Or do you want your kernels to be tampered with by anyone that gets hands onto your computer? It is a bit more complex, but not that much. The main trick was to automatically bake an extra decryption key into the kernel every time it's installed, so you don't need to put it in twice. (Once for GRUB to find the kernel, second time for kernel to be able to touch the FS) -- Michal Schorm Software Engineer Core Services - Databases Team Red Hat -- On Wed, May 15, 2024 at 1:45 AM Chris Adams <linux@xxxxxxxxxxx> wrote: > > Once upon a time, Michal Schorm <mschorm@xxxxxxxxxx> said: > > On Tue, May 14, 2024 at 8:13 PM Tim via users > > <users@xxxxxxxxxxxxxxxxxxxxxxx> wrote: > > > Does /boot still need to be its own partition, these days? > > > /boot/efi has to be, but that's mapped into /boot, already. > > > > Definitely not. > > It does for a variety of cases, such as an encrypted root filesystem. > > -- > Chris Adams <linux@xxxxxxxxxxx> > -- > _______________________________________________ > users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx > Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue -- _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
