{"id":25,"date":"2007-07-07T23:46:57","date_gmt":"2007-07-07T22:46:57","guid":{"rendered":"http:\/\/pusling.com\/blog\/?p=25"},"modified":"2007-07-07T23:46:57","modified_gmt":"2007-07-07T22:46:57","slug":"paranoia","status":"publish","type":"post","link":"https:\/\/pusling.com\/blog\/?p=25","title":{"rendered":"paranoia++ ?"},"content":{"rendered":"

Hi!<\/p>\n

Earlier I blogged about being too (little) paranoid<\/a>. <\/p>\n

One of the comments was my unencrypted \/boot on my harddrive. So I did something to it. Daniel Baumann<\/a> told me some stuff at debconf<\/a> about how to make bootable cd’s with grub – so I had to try to move my \/boot to a cdrom instead.<\/p>\n

It works.<\/p>\n

A quick and dirty howto:
\nmkdir -p builddir\/foo
\ncp -r \/boot builddir\/foo
\ncd builddir
\ngenisoimage -no-emul-boot -boot-load-size 4 -boot-info-table -r -b boot\/grub\/stage2_eltorito -o boot.iso foo
\n<\/code><\/p>\n

and now you are not yet up and running. It looks like it, but you have to adapt boot\/grub\/menu.lst to make it boot from cd.<\/p>\n

First issue: boot fails with a “Error 29: Disk Write Error” – I wondered a bit and asked for help around and wondered a bit more why grub wanted to write to my harddrives in order to boot … finally solved it with help from the Super Grub Disk Page<\/a> – it was the savedefault point of all my kernels. Removing that made it boot. So time to remove \/boot and trust my cd.<\/p>\n

Which was a wrong decision.<\/p>\n

All my kernels had root=(hd0,0) so it kind of didn’t work. Changing this to root=(cd) did it – and removing (hd0,0) from my splashimage was also a bit nessesary.<\/p>\n

So after this, rebuild the cd again with the genisoimage command mentioned above and now I am up and running completely.<\/p>\n

And I of course have secretly marked the cd so evil people can’t replace it without me noticing it.<\/p>\n

So what’s next step in my tinfoil covered world ? SELinux? something else? I guess you know how to make comments. Feel free.<\/p>\n

\/Sune<\/p>\n","protected":false},"excerpt":{"rendered":"

Hi! Earlier I blogged about being too (little) paranoid. One of the comments was my unencrypted \/boot on my harddrive. So I did something to it. Daniel Baumann told me some stuff at debconf about how to make bootable cd’s with grub – so I had to try to move my \/boot to a cdrom […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-25","post","type-post","status-publish","format-standard","hentry","category-english"],"_links":{"self":[{"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/25","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=25"}],"version-history":[{"count":0,"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/25\/revisions"}],"wp:attachment":[{"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pusling.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}