Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 Jan 2019 13:10:45 -0700
From:      Warner Losh <imp@bsdimp.com>
To:        Karl Denninger <karl@denninger.net>
Cc:        FreeBSD-STABLE Mailing List <freebsd-stable@freebsd.org>
Subject:   Re: Not sure if this is the correct place.... (laptop, dual-boot EFI)
Message-ID:  <CANCZdfrX5TQTY268RqRr%2BGpVbcWGyjh7c=jsZjAzzZ1edsTuMg@mail.gmail.com>
In-Reply-To: <7a61c927-796d-ea1f-8dce-37e82fb6d646@denninger.net>
References:  <7391812a-a2ad-874a-80c9-5a871a29f680@denninger.net> <CAJuc1zOaWhfDLKJUFPT7rFORP%2B4m4B5aTU769LK_aDkBOZWMDA@mail.gmail.com> <CACNAnaFLEOucgRFvuukCoznCn7e4RyYSsdo1cRPGUWk9A6ToNg@mail.gmail.com> <CAO7yDHovVLsd2V8Me-fqOcCx=c1%2BC0Ff%2BsrKnmG17GSLtPp1bw@mail.gmail.com> <7a61c927-796d-ea1f-8dce-37e82fb6d646@denninger.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Jan 26, 2019 at 1:01 PM Karl Denninger <karl@denninger.net> wrote:

> Further question....  does boot1.efi (which I assume has to be placed on
> the EFI partition and then something like rEFInd can select it) know how
> to handle a geli-encrypted primary partition (e.g. for root/boot so I
> don't need an unencrypted /boot partition), and if so how do I tell it
> that's the case and to prompt for the password?
>

Not really. The whole reason we ditched boot1.efi is because it is quite
limited in what it can do. You must loader.efi for that.


> (If not I know how to set up for geli-encryption using a non-encrypted
> /boot partition, but my understanding is that for 12 the loader was
> taught how to handle geli internally and thus you can now install 12 --
> at least for ZFS -- with encryption on root.  However, that wipes the
> disk if you try to select it in the installer, so that's no good -- and
> besides, on a laptop zfs is overkill.)
>

For MBR stuff, yes. For loader.efi, yes. For boot1.efi, no: it did not and
will not grow that functionality.

Warner


> Thanks!
>
> On 1/26/2019 08:08, Kamila Sou=C4=8Dkov=C3=A1 wrote:
> > I'm just booting the installer, going to do this on my X1 Carbon (5th
> gen),
> > and I'm planning to use the efibootmgr entry first (which is sufficient
> for
> > booting), and later I might add rEFInd if I feel like it. I'll be posti=
ng
> > my steps online, I can post the link once it's out there if you're
> > interested.
> >
> > I'm very curious about HW support on the 6th gen Carbon, it'd be great =
to
> > hear how it goes.
> >
> > Have fun!
> >
> > Kamila
> >
> > On Sat, 26 Jan 2019, 06:54 Kyle Evans, <kevans@freebsd.org> wrote:
> >
> >> On Fri, Jan 25, 2019 at 6:30 PM Jonathan Chen <jonc@chen.org.nz> wrote=
:
> >>> On Sat, 26 Jan 2019 at 13:00, Karl Denninger <karl@denninger.net>
> wrote:
> >>> [...]
> >>>> I'd like to repartition it to be able to dual boot it much as I do
> with
> >>>> my X220 (I wish I could ditch Windows entirely, but that is just not
> >>>> going to happen), but I'm not sure how to accomplish that in the EFI
> >>>> world -- or if it reasonably CAN be done in the EFI world.
> Fortunately
> >>>> the BIOS has an option to turn off secure boot (which I surmise from
> >>>> reading the Wiki FreeBSD doesn't yet support) but I still need a mea=
ns
> >>>> to select from some reasonably-friendly way *what* to boot.
> >>> The EFI partition is just a MS-DOS partition, and most EFI aware BIOS
> >>> will (by default) load /EFI/Boot/boot64.efi when starting up. On my
> >>> Dell Inspiron 17, I created /EFI/FreeBSD and copied FreeBSD's
> >>> /boot/loader.efi to /EFI/FreeBSD/boot64.efi. My laptop's BIOS setup
> >>> allowed me to specify a boot-entry to for \EFI\FreeBSD\boot64.efi. On
> >>> a cold start, I have to be quick to hit the F12 key, which then allow=
s
> >>> me to specify whether to boot Windows or FreeBSD. I'm not sure how
> >>> Lenovo's BIOS setup works, but I'm pretty sure that it should have
> >>> something similar.
> >>>
> >> Adding a boot-entry can also be accomplished with efibootmgr. This is
> >> effectively what the installer in -CURRENT does, copying loader to
> >> \EFI\FreeBSD on the ESP and using efibootmgr to insert a "FreeBSD"
> >> entry for that loader and activating it.
> >> _______________________________________________
> >> freebsd-stable@freebsd.org mailing list
> >> https://lists.freebsd.org/mailman/listinfo/freebsd-stable
> >> To unsubscribe, send any mail to "
> freebsd-stable-unsubscribe@freebsd.org"
> >>
> > _______________________________________________
> > freebsd-stable@freebsd.org mailing list
> > https://lists.freebsd.org/mailman/listinfo/freebsd-stable
> > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.or=
g
> "
> --
> Karl Denninger
> karl@denninger.net <mailto:karl@denninger.net>
> /The Market Ticker/
> /[S/MIME encrypted email preferred]/
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CANCZdfrX5TQTY268RqRr%2BGpVbcWGyjh7c=jsZjAzzZ1edsTuMg>