@cwebberChristine Lemmer-Webber 
@jfredJonathan Frederickson 
@vagrantcVagrant Cascadian you could have another minimal kernel + initramfs that decrypts /boot and then loads guix's kernel with kexec (something like u-root, except u-root doesn't support LUKS (but if disk space isn't an issue you could probably include a cryptsetup binary with u-root if you wanted to use that))@cwebberChristine Lemmer-Webber @jfredJonathan Frederickson @vagrantcVagrant Cascadian this also has the advantage that it wouldn't be as slow as GRUB to decrypt your disk, and if you wanted to you could avoid entering your disk encryption password twice by either putting the key into the second (encrypted) initramfs (although this has security implications for LUKS2 because it makes the key accessible from userspace) or possibly using kexec handover (which I'm not sure how to do, or if it would require kernel modifications, but that is a thing)If you have a fediverse account, you can quote this note from your own instance. Search https://berkeley.edu.pl/objects/693ea271-52b9-4ff0-baef-bfb52ecf94c3 on your instance and quote it. (Note that quoting is not supported in Mastodon.)
