Github Issue #885 - qubes-dom0-update could check whether /boot is mounted

[apparatus]

@alimirjamali

I think it would be a highly unlikely scenario. Doesn’t this require unencrypted root?

It can be done with encrypted root as well e.g. encrypted /boot scenario:

GRUB (re)installation: Qubes OS/Xen specifics (?)

Hello. TL;DR I would like to learn if GRUB bootloader installation/core image creation commands Qubes OS and/or Xen specific, comparing to usual Linux distributions. Reasoning To use detached LUKS header without detached /boot partition, I must generate GRUB core image manually to embed early config file. Otherwise GRUB can not know about existence of encrypted device. Below is example of how I would accomplish this task on ArchLinux, adapted for Qubes OS paths. Here I omit all LUKS initra…

@alimirjamali

This is again a highly unlikely scenario. I am not sure if Anaconda installer would go forward without /boot access. And it should add it to fstab.

Yes, that’s unlikely but still possible scenario with some custom partitioning or user commenting out the /boot in fstab instead of adding noauto option.