This commit is contained in:
mjallen18
2026-01-26 17:16:33 -06:00
parent c5481909a1
commit c29ff231f9

View File

@@ -57,18 +57,18 @@ in
script = '' script = ''
clevis decrypt < "/etc/clevis/nuc-nixos.jwe" | bcachefs unlock -k session /dev/disk/by-label/disk-main-nuc-nixos-bcachefs-root clevis decrypt < "/etc/clevis/nuc-nixos.jwe" | bcachefs unlock -k session /dev/disk/by-label/disk-main-nuc-nixos-bcachefs-root
''; '';
wantedBy = [ "initrd-root-device.target" ];
requiredBy = [ "initrd-root-fs.target" ];
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
TimeoutSec = "10s"; # Limit how long we wait for network TimeoutSec = "10s";
}; };
}; };
clevis = mkIf (config.${namespace}.hardware.disko.filesystem == "bcachefs"){ clevis = mkIf (config.${namespace}.hardware.disko.filesystem == "bcachefs"){
enable = true; enable = true;
# devices = {
# "/dev/disk/by-partlabel/${config.disko.devices.disk.main.content.partitions.root.name}".secretFile = (lib.snowfall.fs.get-file "secrets/nuc-nixos.jwe");
# };
}; };
luks = mkIf cfg.yubikeyEncryption { luks = mkIf cfg.yubikeyEncryption {
devices = { devices = {
"${config.disko.devices.disk.main.content.partitions.root.name}" = { "${config.disko.devices.disk.main.content.partitions.root.name}" = {