From 9e2b14552b3f4659c5c20fcacaa759cc03c4826e Mon Sep 17 00:00:00 2001 From: Leah Rowe Date: Tue, 26 Mar 2024 21:59:27 +0000 Subject: [PATCH] warning Signed-off-by: Leah Rowe --- site/docs/gnulinux/index.md | 7 +++++++ site/news/canoeboot0.1.md | 9 +++++++++ 2 files changed, 16 insertions(+) diff --git a/site/docs/gnulinux/index.md b/site/docs/gnulinux/index.md index b90695a..a437cc3 100644 --- a/site/docs/gnulinux/index.md +++ b/site/docs/gnulinux/index.md @@ -52,6 +52,13 @@ executed from Canoeboot's SeaBIOS payload. Encrypted /boot via LUKS2 with argon2 ======================================= +**WARNING: The Canoeboot 0.1 release only supports LUKS1 with PBKDF2. It's +a special release that uses much older GRUB. The November 2023 releases of +Canoeboot contain LUKS2 support. If you're using LUKS encryption, please +use Canoeboot from November 2023 - or use a release after 0.1. The reason why +Canoeboot 0.1 has this issue will be clear if you read the Canoeboot 0.1 +release announcement. Canoeboot 0.1 is not intended for production use.** + Full encryption for basic LUKS2 (with PBKDF or argon2 key derivation) is supported in Canoeboot. Legacy LUKS1 is also supported. On *most* other systems, `/boot` must be unencrypted, but Canoeboot supports use of the diff --git a/site/news/canoeboot0.1.md b/site/news/canoeboot0.1.md index 573b888..40fec19 100644 --- a/site/news/canoeboot0.1.md +++ b/site/news/canoeboot0.1.md @@ -2,6 +2,15 @@ % Leah Rowe in Canoe Leah Mode™ % 27 January 2024 +**WARNING: This release lacks LUKS2 support. If you want LUKS2 with argon2, +please use the November 2023 release, or use a release made after 0.1. This +is because 0.1 uses an older GRUB revision (more context provided below)** + +**Canoeboot 0.1 is a meme release, and this will become clear when you read +the notes below. Canoeboot 0.1 is not intended for production use, but only as +a proof of concept. To reiterate: please use the November 2023 Canoeboot +release, or a release made after Canoeboot 0.1.** + This is a special release. It is *not* based on the recent [Libreboot 20240126 release](https://libreboot.org/news/libreboot20240126.html). No, it is very special indeed.