kylekrein/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

zh

Browse source
This commit is contained in:
Aleksandr Lebedev 2025-09-26 19:21:48 +02:00
parent 1c5299e2ca
commit 8061c5c132
2 changed files with 15 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
modules/nixos/presets/disko/impermanenceBtrfsLuks/default.nix
View file

@ -45,7 +45,7 @@ in {
mountpoint = "/boot";
mountOptions = [
"defaults"
"umask=0077"
"umask=0077"
];
};
};
@ -61,7 +61,13 @@ in {
"--perf-no_write_workqueue"
];
# https://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html
settings = {crypttabExtraOpts = ["fido2-device=auto" "token-timeout=10"];};
settings = {
keyFile = "/tmp/secret.key";
crypttabExtraOpts = [
"fido2-device=auto"
"token-timeout=10"
];
};
content = {
type = "btrfs";
extraArgs = ["-L" "nixos" "-f"];