jawz/NixOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

moved key to initramfs

Browse Source
This commit is contained in:
Danilo Reyes
2024-09-18 00:31:50 -06:00
parent f09d882d7d
commit 77ec2f10ad
3 changed files with 48 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

62
hosts/server/hardware-configuration.nix
View File

@@ -25,35 +25,38 @@
enableCryptodisk = true;
};
};
initrd.luks.devices = {
nvme = {
device = "/dev/disk/by-uuid/af72f45c-cf7c-4e7d-8eab-2a95ab754921";
keyFile = "/boot/keyfile";
preLVM = true;
};
# WHEN MIGRATING THE DISKS
# remember to delete this keyfile
# and replace it with the one on miniserver
# or move the keyfile
disk1 = {
device = "/dev/disk/by-uuid/a9b0f346-7e38-40a6-baf6-3ad80cafc842";
keyFile = "/boot/keyfile";
preLVM = true;
};
disk2 = {
device = "/dev/disk/by-uuid/0ed12b83-4c56-4ba8-b4ea-75a9e927d771";
keyFile = "/boot/keyfile";
preLVM = true;
};
disk3 = {
device = "/dev/disk/by-uuid/8cd728f6-0d5b-4cea-8f7d-01aad11192c1";
keyFile = "/boot/keyfile";
preLVM = true;
};
disk4 = {
device = "/dev/disk/by-uuid/7fcac808-491f-4846-a4a9-a34cc77cb43d";
keyFile = "/boot/keyfile";
preLVM = true;
initrd = {
secrets."/keyfile" = /etc/keyfile;
luks.devices = {
nvme = {
device = "/dev/disk/by-uuid/af72f45c-cf7c-4e7d-8eab-2a95ab754921";
keyFile = "/keyfile";
preLVM = true;
};
# WHEN MIGRATING THE DISKS
# remember to delete this keyfile
# and replace it with the one on miniserver
# or move the keyfile
disk1 = {
device = "/dev/disk/by-uuid/a9b0f346-7e38-40a6-baf6-3ad80cafc842";
keyFile = "/keyfile";
preLVM = true;
};
disk2 = {
device = "/dev/disk/by-uuid/0ed12b83-4c56-4ba8-b4ea-75a9e927d771";
keyFile = "/keyfile";
preLVM = true;
};
disk3 = {
device = "/dev/disk/by-uuid/8cd728f6-0d5b-4cea-8f7d-01aad11192c1";
keyFile = "/keyfile";
preLVM = true;
};
disk4 = {
device = "/dev/disk/by-uuid/7fcac808-491f-4846-a4a9-a34cc77cb43d";
keyFile = "/keyfile";
preLVM = true;
};
};
};
kernelModules = [ "kvm-intel" ];
@@ -112,6 +115,7 @@
"/boot" = {
device = "/dev/disk/by-uuid/c574cb53-dc40-46db-beff-0fe8a4787156";
fsType = "ext4";
options = [ "nofail" ];
};
"/boot/efi" = {
device = "/dev/disk/by-uuid/CBE7-5DEB";