ZFSBootMenu
docs.zfsbootmenu.org
ZFSBootMenu
1–10 of 56 posts
Re: ZFSBootMenu
#2I used the FreeBSD version of this, I'm a shill at this point but I find nixos booting to an ephemeral tmpfs to be much better.
This wouldn't apply if you needed to have divergent state though, though it's hard to imagine a use case for that unhandled by fs snapshots.
Re: ZFSBootMenu
#3Kudos to everyone involved in this! Love everything about this. Using it on my notebook, on dedicated servers rented at Hetzner as well as on Hetzner-Cloud, as well on a bunch of dedicated servers in a rack. Solves almost all problems related to ZFS and Linux. Booting this from SYSLINUX works very well as well as UEFI - it's extensible and you can run it with the ZFS git version if you use the generate-zbm command. Saved my ass quite a few times already.
Re: ZFSBootMenu
#4I was looking at using this for my arch zfs-on-root setups, but I've instead just been hacking on /etc/grub.d/10_linux and /lib/initcpio/hooks/zfs to get the boot menu setup I want with grub. I like the simplicity of it this way with less dependencies (especially otherwise needing to use AUR for the zfsbootmenu build or use the pre-built binary blob).
One concern I had with zfsbootmenu was I couldn't figure out how to load microcode. With kexec, zfsbootmenu can only load one image and late loading microcode may be "dangerous" [1]. I don't know practically if that is a real security issue or not. I tried cat'ing my images together as below, but it still didn't work for me:
mv initramfs-linux.img initramfs-linux.img.orig
cat intel-ucode.img initramfs-linux.img.orig > initramfs-linux.img
Re: ZFSBootMenu
#5Does ZFSBootMenu allow for entering encryption password remotely on encrypted root?
Re: ZFSBootMenu
#6Does ZFSBootMenu allow for entering encryption password remotely on encrypted root?
yes you can add an ssh server or setup network in zfsbootmenu and use keylocation=https
Re: ZFSBootMenu
#7Does ZFSBootMenu allow for entering encryption password remotely on encrypted root?
Yes - both Dracut and mkinitcpio allow you to embed an SSH server in the ZFSBootMenu initramfs (dropbear, or OpenSSH) and connect to it. Once you connect, you can access the main interface and unlock any datasets prior to kexec.
https://docs.zfsbootmenu.org/en/v2.2.x/guides/general/remote...
Re: ZFSBootMenu
#8Kudos to everyone involved in this! Love everything about this. Using it on my notebook, on dedicated servers rented at Hetzner as well as on Hetzner-Cloud, as well on a bunch of dedicated servers in a rack. Solves almost all problems related to ZFS and Linux. Booting this from SYSLINUX works very well as well as UEFI - it's extensible and you can run it with the ZFS git version if you use the generate-zbm command. S…
May I ask how you use this on the dedicated server?
Re: ZFSBootMenu
#9I was looking at using this for my arch zfs-on-root setups, but I've instead just been hacking on /etc/grub.d/10_linux and /lib/initcpio/hooks/zfs to get the boot menu setup I want with grub. I like the simplicity of it this way with less dependencies (especially otherwise needing to use AUR for the zfsbootmenu build or use the pre-built binary blob). One concern I had with zfsbootmenu was I couldn't figure out how t…
There shouldn't be any issues catting the real initramfs with microcode into another file. I do that, as does another ZBM developer. What do you see when you try it?
I started ZBM years ago by hacking on the same grub script, then progressed to what it is now!
Re: ZFSBootMenu
#10Been using this for arch https://github.com/prabirshrestha/simple-arch-installer and server https://github.com/prabirshrestha/simple-ubuntu-installer with remote ssh unlock for zfs encryption.