From 5244ad78d7eb44f04558b6879065d31bffbcbaa2 Mon Sep 17 00:00:00 2001 From: Payas Relekar Date: Tue, 26 Dec 2023 19:25:24 +0530 Subject: [PATCH] hermes: Boot with systemd initrd This was an unfinished attempt at passwordless disk decryption. But for now, it does not work. I'll need some decryption device/USB stick for it, which I'm not currently willing to setup. Anyway, will figure it out later. Got other prioriries now. --- hosts/hermes/hardware.nix | 21 +++++++++++++-------- hosts/hermes/home.nix | 1 + 2 files changed, 14 insertions(+), 8 deletions(-) diff --git a/hosts/hermes/hardware.nix b/hosts/hermes/hardware.nix index a862512..41166c8 100644 --- a/hosts/hermes/hardware.nix +++ b/hosts/hermes/hardware.nix @@ -15,15 +15,20 @@ }; supportedFilesystems = [ "ntfs" ]; - # Setup keyfile - initrd.secrets = { - "/crypto_keyfile.bin" = null; + initrd = { + systemd = { + enable = true; + }; + + # Setup keyfile + secrets = { + "/crypto_keyfile.bin" = null; + }; + + # Enable swap on luks + luks.devices."luks-8271922a-e889-4f04-8e87-07f0bcde890d".device = "/dev/disk/by-uuid/8271922a-e889-4f04-8e87-07f0bcde890d"; + luks.devices."luks-8271922a-e889-4f04-8e87-07f0bcde890d".keyFile = "/crypto_keyfile.bin"; }; - - # Enable swap on luks - initrd.luks.devices."luks-8271922a-e889-4f04-8e87-07f0bcde890d".device = "/dev/disk/by-uuid/8271922a-e889-4f04-8e87-07f0bcde890d"; - initrd.luks.devices."luks-8271922a-e889-4f04-8e87-07f0bcde890d".keyFile = "/crypto_keyfile.bin"; - kernelPackages = pkgs.linuxPackages_latest; }; diff --git a/hosts/hermes/home.nix b/hosts/hermes/home.nix index 9d72466..c107eb7 100644 --- a/hosts/hermes/home.nix +++ b/hosts/hermes/home.nix @@ -34,6 +34,7 @@ spectacle gwenview kate + partition-manager libreoffice # thoroughly average grown up stuff