Detached LUKS header

119 views
Skip to first unread message

spi...@gmail.com

unread,
Dec 30, 2017, 12:06:53 PM12/30/17
to qubes-users
Hello!
One simple question: is it possible to setup Qubes OS with detached LUKS header and store it on bootable USB key?
Tried custom installation, but seems that the GUI thingie doesn't recognize LUKS partition without the header :(
With archlinux this was a breeze.

Andrew David Wong

unread,
Dec 31, 2017, 10:25:30 PM12/31/17
to spi...@gmail.com, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
I haven't personally tried it, but I can't immediately think of
anything preventing it. You won't be able to do it via the GUI
installer, but you should be able to do it from the command-line. I
suggest taking inspiration from here:

https://www.qubes-os.org/doc/custom-install/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=qFv/
-----END PGP SIGNATURE-----

spi...@gmail.com

unread,
Jan 1, 2018, 12:14:27 PM1/1/18
to qubes-users
> I haven't personally tried it, but I can't immediately think of
> anything preventing it. You won't be able to do it via the GUI
> installer, but you should be able to do it from the command-line. I
> suggest taking inspiration from here:
>
> https://www.qubes-os.org/doc/custom-install/
>
> - --
> Andrew David Wong (Axon)
> Community Manager, Qubes OS
> https://www.qubes-os.org
>

I did look at this link as I already said.
But the thing is that there are no info on how to install it
without using the GUI. I guess I could look into the installer code,
but I didn't try it for now

Andrew David Wong

unread,
Jan 1, 2018, 6:23:34 PM1/1/18
to spi...@gmail.com, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2018-01-01 11:14, spi...@gmail.com wrote:
>> I haven't personally tried it, but I can't immediately think of
>> anything preventing it. You won't be able to do it via the GUI
>> installer, but you should be able to do it from the command-line.
>> I suggest taking inspiration from here:
>>
>> https://www.qubes-os.org/doc/custom-install/
>>
>
> I did look at this link as I already said.

Oh, I didn't know you were referring to that document. I thought you
meant that you clicked on the "custom" button in the GUI installer or
something.

> But the thing is that there are no info on how to install it
> without using the GUI. I guess I could look into the installer
> code, but I didn't try it for now
>

Yeah, I see what you mean. I don't know whether there's a way to
complete the installation without the GUI, and I can't recall anyone
discussing it on the list. However, the Qubes installer is mostly the
same as the Fedora installer, so if there's a way to do it when
installing Fedora, there's a good chance the same method would apply
in Qubes.

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=/whK
-----END PGP SIGNATURE-----

Tom Zander

unread,
Jan 2, 2018, 4:39:02 AM1/2/18
to qubes...@googlegroups.com, spi...@gmail.com
On Monday, 1 January 2018 18:14:27 CET spi...@gmail.com wrote:
> I did look at this link as I already said.
> But the thing is that there are no info on how to install it
> without using the GUI.

if you get to the installer you can use alt-f1 to get to a native TTY. There
are several of them and at least one is a bling bash which has root.
Not sure how easy it is to use, but that may just be the entry point you
were looking for.

--
Tom Zander
Blog: https://zander.github.io
Vlog: https://vimeo.com/channels/tomscryptochannel
Reply all
Reply to author
Forward
0 new messages