aboutsummaryrefslogtreecommitdiff
path: root/docs
diff options
context:
space:
mode:
authorSebastian 'Swift Geek' Grzywna <swiftgeek@gmail.com>2019-12-19 11:46:17 +0100
committerSebastian 'Swift Geek' Grzywna <swiftgeek@gmail.com>2019-12-19 11:46:17 +0100
commit87a1d491516bd3d9483a8ba09aeca040227bd658 (patch)
treedcfb3e605c26b3f7d597117f99f738788106cb84 /docs
parent20be0c488427b7430f9df7b43e1511be33f67d2b (diff)
downloadlibrebootfr-87a1d491516bd3d9483a8ba09aeca040227bd658.tar.gz
librebootfr-87a1d491516bd3d9483a8ba09aeca040227bd658.zip
Improve grub debian instructions
Diffstat (limited to 'docs')
-rw-r--r--docs/gnulinux/encrypted_debian.md26
1 files changed, 13 insertions, 13 deletions
diff --git a/docs/gnulinux/encrypted_debian.md b/docs/gnulinux/encrypted_debian.md
index 23b4503f..eb8093cf 100644
--- a/docs/gnulinux/encrypted_debian.md
+++ b/docs/gnulinux/encrypted_debian.md
@@ -199,29 +199,29 @@ directory from another system, so write it down and keep the note
somewhere secret. Ideally, you should memorize it and then burn the note
(or not even write it down, and memorize it still)>
-Modify grub.cfg (CBFS)
+Generate distro's grub.cfg
======================
Now you need to set it up so that the system will automatically boot,
without having to type a bunch of commands.
-Modify your grub.cfg (in the firmware) [using this
-tutorial](grub_cbfs.md); just change the default menu entry 'Load
-Operating System' to say this inside:
+Install grub-coreboot if not already installed:
- cryptomount -a
- set root='lvm/matrix-rootvol'
- linux /vmlinuz root=/dev/mapper/matrix-rootvol cryptdevice=/dev/mapper/matrix-rootvol:root
- initrd /initrd.img
-
-Without specifying a device, the *-a* parameter tries to unlock all
-detected LUKS volumes. You can also specify -u UUID or -a (device).
+ # apt-get install grub-coreboot
+
+Modify or add following lines to /etc/default/grub
+
+ GRUB_CMDLINE_LINUX="cryptdevice=/dev/mapper/matrix-rootvol:root"
+ GRUB_ENABLE_CRYPTODISK=y
+
+Copy fonts/backgrounds to /boot/grub and
+generate grub.cfg using following command:
+
+ # grub-install --target=i386-coreboot
[Refer to this guide](grub_hardening.md) for further guidance on
hardening your GRUB configuration, for security purposes.
-Flash the modified ROM using [this tutorial](../install/#flashrom).
-
Troubleshooting
===============