Encrypted installs can unlock root in the initramfs

Breadway commented

2026-09-30 01:03:47 +08:00

Owner

Calamares now registers an encrypted-root boot keyfile before fstab, and the installer prepares the matching mkinitcpio hook and keyfile before initramfs generation. GRUB receives the LUKS container UUID and mapper name for the selected hook; the smoke test checks encrypted boot parameters.

Verified: bash -n for the changed scripts, YAML parsing for the Calamares settings, git diff --check, and FAST_BUILD=1 ISO build. The build completed with an existing nbd-client initramfs package-hook warning. Encrypted UEFI and BIOS VM installs were not run, so the issue remains in doing until those boot checks are confirmed.

Closes #23

Calamares now registers an encrypted-root boot keyfile before fstab, and the installer prepares the matching mkinitcpio hook and keyfile before initramfs generation. GRUB receives the LUKS container UUID and mapper name for the selected hook; the smoke test checks encrypted boot parameters. Verified: `bash -n` for the changed scripts, YAML parsing for the Calamares settings, `git diff --check`, and `FAST_BUILD=1` ISO build. The build completed with an existing `nbd-client` initramfs package-hook warning. Encrypted UEFI and BIOS VM installs were not run, so the issue remains in doing until those boot checks are confirmed. Closes #23

Breadway added 1 commit

2026-09-30 01:03:47 +08:00

fix: configure initramfs unlock for encrypted installs 7856507857

Breadway referenced this pull request

2026-09-30 01:03:52 +08:00

Encrypted installs cannot unlock root in the initramfs #23

Breadway referenced this pull request

2026-09-30 03:57:24 +08:00

Encrypted installs cannot unlock root in the initramfs #23

Breadway referenced this pull request

2026-09-30 03:58:08 +08:00

Encrypted installs cannot unlock root in the initramfs #23

Breadway commented

2026-09-30 03:58:29 +08:00

Author

Owner

This PR card tracks BOS-23 / PR #53. Encrypted UEFI and BIOS installation acceptance is still missing; reviewer found the PR unmergeable. Parent BOS-23 is TODO. Synchronizing card status to TODO.

Breadway added 1 commit

2026-10-01 10:20:18 +08:00

Merge main into encrypted root installer fix

Build and publish calamares / calamares (push) Successful in 4m53s

Details

Build and publish powerlevel10k / powerlevel10k (push) Successful in 3m9s

Details

Build and publish calamares / calamares (pull_request) Successful in 5m19s

Details

81338b9855

Breadway added 1 commit

2026-10-01 15:58:02 +08:00

Merge remote-tracking branch 'origin/main' into HEAD 49bb927f8a

Breadway referenced this pull request

2026-10-01 15:58:11 +08:00

Encrypted installs cannot unlock root in the initramfs #23

Breadway referenced this pull request

2026-10-01 16:26:05 +08:00

Encrypted installs cannot unlock root in the initramfs #23

Breadway commented

2026-10-01 16:26:13 +08:00

Author

Owner

PR #53 has the implementation and static wiring checks recorded on the rebased head. Fresh encrypted UEFI/BIOS Calamares installs and boot-to-breadgreet acceptance remain outstanding; BOS has no ordinary push CI. Moving the implementation to REVIEW for the requested handoff. Do not treat as verified or done until those acceptance checks are recorded.

Breadway merged commit 4605a60fd5 into main

2026-10-02 14:15:59 +08:00

Breadway referenced this pull request from a commit

2026-10-02 14:16:01 +08:00

Merge pull request 'Encrypted installs can unlock root in the initramfs' (#53) from fix/bos-23-initramfs-luks-unlock into main

Rows
Columns

Encrypted installs can unlock root in the initramfs #53