kylekrein/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

key

Browse source
This commit is contained in:
Aleksandr Lebedev 2025-09-26 21:04:08 +02:00
parent 6660b3a0f5
commit cbf40cf1b3
1 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
systems/x86_64-linux/stargate/disko.nix
View file

@ -16,16 +16,15 @@
"--perf-no_read_workqueue" "--perf-no_read_workqueue"
"--perf-no_write_workqueue" "--perf-no_write_workqueue"
]; ];
format = {
keyFile = "/tmp/secret.key";
};
# https://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html # https://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html
settings = { settings = {
allowDiscards = true;
crypttabExtraOpts = [ crypttabExtraOpts = [
"fido2-device=auto" "fido2-device=auto"
"token-timeout=10" "token-timeout=10"
]; ];
}; };
passwordFile = "/tmp/secret.key";
content = { content = {
type = "zfs"; type = "zfs";
pool = "zstorage"; pool = "zstorage";