> I have a working configuration with a Luks-encrypted root filesystem
> on two devices (btrfs). I do not use postBootCommands (except to set
> up encrypted swap). I set
>
> boot.initrd.luks.devices = [{ device = "/dev/..."; name = (pick any
> name);} {device = ...; name = ...;}];
> boot.initrd.supportedFilesystems = [ "btrfs" ];
>
> I don't know if there's anything similar if you're not using Luks. Let
> me know if this helps.
>
I'm using luks.
Problem is that I do not want to enter the password for 4 disks. So I keep
key file on other partition and than I have to decrypt partitions with this
key. I didn't find how to do it in configure.nix file. Probably could be
something like
boot.initrd.luks.devices = [{ device="/dev/...", keyfile="XXX" }]
but whatever I do it manually or there is any way in configure.nix, I need
to know where the key actually is.
So I have an Idea, I'll try to mount the boot partition somewhere. but
maybe it's already mounted or there are any better ways to do it ?
>
>
_______________________________________________
nix-dev mailing list
nix-dev@lists.science.uu.nl
http://lists.science.uu.nl/mailman/listinfo/nix-dev
