News for hackers. Stuff that matters.

A comment on Grub2 security update renders system unbootable. Parent comment

Re:Grub2 security update renders system unbootable by yrro on Thursday July 30, 2020 @01:18PM (#24000674)
> You can do mdraid, you just have to stick the metadata at the end of the drive rather than the beginning. The utilities that set up your raid even warn you about this because this setup is so standard.

You're screwed when the firmware decides to write to the ESP though.

[ Parent | on HN ]
Re:Grub2 security update renders system unbootable by Spivak on Thursday July 30, 2020 @01:27PM (#24000775)
This is 100% true but I haven't been so unlucky as to encounter firmware that does this under normal operation. This has been the "firmware doesn't understand software raid" solution for ages.
[ Parent | on HN ]
Re:Grub2 security update renders system unbootable by yrro on Friday July 31, 2020 @11:17AM (#24009460)
Indeed, it hasn't happened to me but I remember reading about someone who discovered the hard way that their firmware fell back to storing boot variables in a file on the ESP for some reason. It's the sort of thing you only notice once you're staring at an error message, wondering why your ESP is corrupted.

It's hardware RAID or nothing, at least for the ESP for me!

[ Parent | on HN ]