Re: Suggestion: Use a unified kernel image by default in the future.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mo, 04.07.22 19:27, Fedora Development ML (devel@xxxxxxxxxxxxxxxxxxxxxxx) wrote:

> I think using credentials for the rootfs is not very useful, the
> user already enters the LUKS password on boot.

I can't parse this.

the systemd credentials stuff are not just for passing secrets or
so. They can be used for any kind of config option. And they are not
just encrypted but also authenticated. That means we can use them to
pass root device info (i.e. a string like /dev/disk/by-uuid/…) in. For
that the encryption doesn't matter, but the authentication does, as we
can use the info safely after authentication, since we know it was
encoded by someone who had the permission to do so.

Lennart

--
Lennart Poettering, Berlin
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux