<Copenhagen_Bram>Ooh I just had an idea: Suppose one had a 'boot' partition, installed a full guix system in the encrypted partition, and put a second bootloader in the boot partition that points to the encrypted partition?
<Copenhagen_Bram>you'd have to go through grub 2 times (or 3 if you use libreboot with grub)
<nckx>Copenhagen_Bram: Wouldn't it have all the drawbacks of the current approach though, while just being slightly slower?
<nckx>ACTION is trying to imagine how that would work.
<Copenhagen_Bram>my theory is that if you're decrypting something from a chip in the motherboard, that might just be slower than it should be
<Copenhagen_Bram>also my theory is that my crazy plan of having an unencrypted boot partition (boot, not /boot), installing grub to the encrypted partition without mounting anything to /boot, and then adding bootloader to the unencrypted partition, might just work. I'd like to start exploring that theory tomorrow.
<Copenhagen_Bram>that is if I don't run into something that holds me back. Which could happen because I'm new to guixsd.
<nckx>Having to enter your passphrase twice? Having GRUB do the decryption the first time?
<Copenhagen_Bram>well if i'm right, and decryption from libreboot is slow because it's from the bios, then when i load the bootloader off the hard drive and use it to decrypt the full guix system, it'll be faster
<Copenhagen_Bram>now i'm wondering if there's a way to simulate that slowness in qemu
<nckx>I'm guessing, maybe the ROM is mapped into RAM but that would only affect the very first stage of GRUB loading.
<Copenhagen_Bram>but anyways even if it isn't any faster than how long it takes when I have to type in the command manually to boot my drive, I can just point a second bootloader to my guix system, so no more manual command typing
<nckx>Copenhagen_Bram: OK. One of us is missing something crucial, and I honestly hope it's me :-)
<nckx>I don't want you wasting your time. Just have fun.
<Copenhagen_Bram>nckx: don't worry, I'm not stupid enough to just do a thing like that to my computer. I'm gonna try it on qemu, for sure
<mange>It returns a new list of services that is %desktop-services with the modifications having been applied.
<brendyn>cannot link `/gnu/store/.links/1r9hlr9f751mz9577bl703w0x0xgdq50v0bxcfmgvr2d79p9bm6q' to `/gnu/store/v6z4q0vsal4ilj44d997qf6wxzd0g1mj-guix-daemon-0.14.0-12.77a1aac/libexec/guix/list-runtime-roots': No space left on device
<brendyn>I'm getting this while running guix pull but I have 60GiB free
<Copenhagen_Bram>roptat: ouch, how did you do that? And do you have a guixsd live usb drive?
<Copenhagen_Bram>do I need to restart after using guix system reconfigure? Does `guix system: error: symlink: Permission denied: "/var/guix/profiles/system-2-link.new"` mean I have to run guix system reconfigure as root?
<g_bor>hello roptat! I'm also interested how did you do that?
<g_bor>Copenhagen_Bram: yes, you have to run system reconfigure as root, and while most of the things get updated without reboot, you need a reboot to get all things updated. This notably includes the guix-daemon itself.
<g_bor>Copenhagen_Bram: guix pull as root pulls guix for the root account. For the system packages to be updated you need a guix system reconfigure. You need root privileges for that. If you do a system reconfigure as root, the root's guix is used.
<g_bor>It is possible to do a reconfigure using a user guix with sudo -E (this preserves the env, so the user guix is found).
<Copenhagen_Bram>jlicht: i just tried to play minetest, framerate was only 11 then went down to 3. Do you get that?
<jlicht>I am able to somehow play fullscreen youtube video on the T400, but not if I'm also running `guix pull' in the background. My guess is that gaming on the T400 might be best limited to nethack and similar games ;)
<Copenhagen_Bram>jlicht: try playing freedoom, i've found that odamex runs really well
<Copenhagen_Bram>jlicht: so if the T400 sucks for gaming, how come when I was on parabola I could play minetest at 40 or so fps if I started it right after I booted? (until the framerate dropped to a single digit)
<jlicht>I'm not saying it sucks for gaming, it just is not a gaming powerhouse. I do not know why there is such a discrepancy between gpu performance on GuixSD and parabola though ╮ (. ❛ _ ❛.) ╭
<snape>Copenhagen_Bram, jlicht, are you both using T400?
<g_bor[m]>rekado_: where can I get more info from this guile peroblm?
<nee`>I tried to package yesod-bin 1.4.5 and got into a mess of up/downgrades for haskell packages. What is the current update/import strategy for haskell packages? Are stackage LTS sets somehow considered, yet? How can I import packages for the LTS that the rest of guix uses?
<Copenhagen_Bram>pkill9: it says you missed a paranthesis, lemme see if i can edit that
<pkill9>if you installed it with `guix package`, jsut run `guix package --rollback`
<pkill9>`guix build` doesn't modify any profiles though
<nyberg>Just wondering how I would add an entry for booting guix on my x220. Currently using gpt but seems the BIOS doesn't detect the grub partition at all. I can boot if I load the grub configuration from a livecd but anything else fails.
<g_bor[m]>after the second guix pull succeeded the problem with guile-sqlite3 is also gone :)
<Copenhagen_Bram>I can live without auto mounting, I'd just like a nice cli way to easily mount something. I miss typing `udiskie-mount -r /dev/sdc1` and then it would decrypt and mount my external drive
<jlicht>Copenhagen_Bram: I don't know, I actually put my mount commands in some bash scripts
<j3kyl>maybe its worthy adding an note that at install of guixsd efi is located at /mnt/boot/efi rather than /boot/efi as it is after guixsd is installed. GuixSD dont chroot and it will always generate errors as we issue grub-mkconfig
<j3kyl>( For ‘grub-efi-bootloader’, it should be the path to a mounted EFI file system.)
<j3kyl>Can we run-dry the reconfigure config.scm just to confirm there is no issue?
<bavier>j3kyl: you can `guix system build config.scm`