Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-11-05 Thread Matthew Garrett
On Tue, Nov 5, 2019 at 8:33 AM Chris Murphy wrote: > > On Fri, Nov 1, 2019 at 2:31 PM Matthew Garrett wrote: > > > > The initrd already contains a UI stack in order to permit disk unlock > > at boot time, so this really doesn't seem like a problem? > > It's a very small and limited UI stack. At l

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-11-05 Thread Chris Murphy
On Fri, Nov 1, 2019 at 2:31 PM Matthew Garrett wrote: > > The initrd already contains a UI stack in order to permit disk unlock > at boot time, so this really doesn't seem like a problem? It's a very small and limited UI stack. At least the GNOME developers I've discussed it with, this environmen

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-11-05 Thread Chris Murphy
On Thu, Oct 31, 2019 at 4:55 PM Lennart Poettering wrote: > Hmm, so far this all just worked for me, I didn't run into any trouble > with suspending just $HOME? What about /var and /home sharing the same volume? I'm pretty sure the default layout for Fedora Silverblue is a separate var volume, mo

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-11-01 Thread Matthew Garrett
On Thu, Oct 31, 2019 at 5:06 PM Lennart Poettering wrote: > Paging doesn't allow that really. It's always ugly. You'd have to have > your own UI stack in the initrd, i.e. basically have an alternative > root disk, that possesses the screen exclusively as long as the system > is up but not unlocked

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-31 Thread Lennart Poettering
On Mo, 14.10.19 16:27, Jonas Meurer (jo...@freesources.org) wrote: > Yeah, something like that was my hope as well: use plymouth and > framebuffer or something alike for spawning the passphrase prompt. But > I'm not sure yet how to ensure that we change to the passphrase prompt > (or overlay the g

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-31 Thread Lennart Poettering
On Do, 10.10.19 17:22, Jonas Meurer (jo...@freesources.org) wrote: > >> systemd-homed maintains only the home directory via LUKS encryption, > >> and leaves the OS itself unencrypted (under the assumption it's > >> protected differently, for example via verity – if immutable — or via > >> encrypt

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-31 Thread Lennart Poettering
On Do, 10.10.19 12:01, Tim Dittler (tim.ditt...@systemli.org) wrote: > > So what's your story on the UI stack? Do you intend to actually copy > > the full UI stack into the ramdisk? If not, what do you intend to do > > instead? > > > > Lennart > > Thank you for your feedback, Lennart. To be honest

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-14 Thread Dave Howorth
On Mon, 14 Oct 2019 16:27:47 +0200 Jonas Meurer wrote: > Yeah, something like that was my hope as well: use plymouth and > framebuffer or something alike for spawning the passphrase prompt. FWIW, I'm just a user but I taboo plymouth on all my systems. I prefer to see the traditional scrolling mes

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-14 Thread Jonas Meurer
Hi again, Dimitri John Ledkov: > On Thu, 10 Oct 2019 at 16:49, Mantas Mikulėnas wrote: >> On Thu, Oct 10, 2019 at 6:23 PM Jonas Meurer wrote: >>> Tim Dittler: On 09.10.19 19:26, Lennart Poettering wrote: > On Mi, 09.10.19 12:20, Jonas Meurer (jo...@freesources.org) wrote: >> We[1] a

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-10 Thread Dimitri John Ledkov
On Thu, 10 Oct 2019 at 16:49, Mantas Mikulėnas wrote: > > On Thu, Oct 10, 2019 at 6:23 PM Jonas Meurer wrote: >> >> Hi Lennart, hi Tim, >> >> thanks a lot for your feedback, Lennart. It's much appreciated! >> >> Tim Dittler: >> > On 09.10.19 19:26, Lennart Poettering wrote: >> >> On Mi, 09.10.19

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-10 Thread Mantas Mikulėnas
On Thu, Oct 10, 2019 at 6:23 PM Jonas Meurer wrote: > Hi Lennart, hi Tim, > > thanks a lot for your feedback, Lennart. It's much appreciated! > > Tim Dittler: > > On 09.10.19 19:26, Lennart Poettering wrote: > >> On Mi, 09.10.19 12:20, Jonas Meurer (jo...@freesources.org) wrote: > >>> We[1] are w

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-10 Thread Jonas Meurer
Hi Lennart, hi Tim, thanks a lot for your feedback, Lennart. It's much appreciated! Tim Dittler: > On 09.10.19 19:26, Lennart Poettering wrote: >> On Mi, 09.10.19 12:20, Jonas Meurer (jo...@freesources.org) wrote: >>> We[1] are working on bringing luksSuspend for LUKS devices before system >>> su

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-10 Thread Tim Dittler
Thank you for your feedback, Lennart. To be honest, the UX of the operation has been a secondary concern for us so far. We're basically exploring what is possible atm. Our current approach is to re-use the initramfs which was used during boot before. This doesn't include X11/wayland. While it would

Re: [systemd-devel] RFC: luksSuspend support in sleep/sleep.c

2019-10-09 Thread Lennart Poettering
On Mi, 09.10.19 12:20, Jonas Meurer (jo...@freesources.org) wrote: > Hi systemd devs, > > We[1] are working on bringing luksSuspend for LUKS devices before system > suspend to Debian. The basic idea is to remove the encryption keys of > encrypted devices from RAM before suspending the system. > >