tpm unlock
This commit is contained in:
@@ -1,5 +1,6 @@
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
namespace,
|
||||
...
|
||||
@@ -38,6 +39,14 @@ in
|
||||
"usb_storage"
|
||||
"sd_mod"
|
||||
];
|
||||
|
||||
luks.devices = {
|
||||
cryptroot = {
|
||||
device = "/dev/disk/by-partlabel/disk-main-matt-nixos-cryptroot";
|
||||
allowDiscards = true; # Used if primary device is a SSD
|
||||
preLVM = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
kernelPackages = kernel;
|
||||
@@ -56,7 +65,10 @@ in
|
||||
|
||||
nixpkgs.crossSystem.system = "aarch64-linux";
|
||||
|
||||
environment.systemPackages = with pkgsVersion; [
|
||||
edk2-uefi-shell
|
||||
];
|
||||
environment = {
|
||||
etc."clevis/disk.jwe".source = ./disk.jwe;
|
||||
systemPackages = with pkgsVersion; [
|
||||
edk2-uefi-shell
|
||||
];
|
||||
};
|
||||
}
|
||||
|
||||
1
systems/x86_64-linux/matt-nixos/disk.jwe
Normal file
1
systems/x86_64-linux/matt-nixos/disk.jwe
Normal file
@@ -0,0 +1 @@
|
||||
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..ufmRm2a8gElU1nwP.LswjjMZH_-Yt9lM.STkxaAJ9L3XReZKevTKpKw
|
||||
Reference in New Issue
Block a user