@jfred I have opened and stared at @vagrantc's config several times https://codeberg.org/vagrantc/mnt-reform-guix-config/src/branch/main/config-mnt-reform.scm
One thing tho is Guix still doesn't have the nice option Debian has for unencrypted /boot and encrypted rest-of-root! Which without Grub becomes a lot more important...
(I think Nix has it, and has the same challenges that Guix does, but they seem to have solved it; presumably we could too?)
There is a workaround, essentially a script that manually copies over the relevant files into an unencrypted /boot:
https://issues.guix.gnu.org/48172#4
If you wanted to preserve rollbacks, you'd have to copy all the relevant generations boot files (kernel, initrd, dtb) and adjust the extlinux.conf appropriately, and plan for a larger than expected size for /boot... because this is #Guix :)
Unencrypted rootfs blocks me from really using it more, too!
