mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-01 23:22:37 +00:00
Load LUKS-related kernel modules on demand
This commit is contained in:
parent
de579ba40b
commit
05d2d19311
@ -63,8 +63,9 @@ in
|
|||||||
|
|
||||||
boot.initrd.luks.cryptoModules = mkOption {
|
boot.initrd.luks.cryptoModules = mkOption {
|
||||||
default =
|
default =
|
||||||
[ "aes" "aes_generic" "aes_x86_64" "aes_i586" "blowfish" "twofish"
|
[ "aes" "aes_generic" "blowfish" "twofish"
|
||||||
"serpent" "cbc" "xts" "lrw" "sha256" "sha1" "sha2"
|
"serpent" "cbc" "xts" "lrw" "sha1" "sha256" "sha512"
|
||||||
|
(if pkgs.stdenv.system == "x86_64-linux" then "aes_x86_64" else "aes_i586")
|
||||||
];
|
];
|
||||||
description = ''
|
description = ''
|
||||||
A list of cryptographic kernel modules needed to decrypt the root device(s).
|
A list of cryptographic kernel modules needed to decrypt the root device(s).
|
||||||
@ -151,7 +152,7 @@ in
|
|||||||
["firewire_ohci" "firewire_core" "firewire_sbp2"];
|
["firewire_ohci" "firewire_core" "firewire_sbp2"];
|
||||||
|
|
||||||
# Some modules that may be needed for mounting anything ciphered
|
# Some modules that may be needed for mounting anything ciphered
|
||||||
boot.initrd.kernelModules = [ "dm_mod" "dm_crypt" "cryptd" ] ++ luks.cryptoModules;
|
boot.initrd.availableKernelModules = [ "dm_mod" "dm_crypt" "cryptd" ] ++ luks.cryptoModules;
|
||||||
|
|
||||||
# copy the cryptsetup binary and it's dependencies
|
# copy the cryptsetup binary and it's dependencies
|
||||||
boot.initrd.extraUtilsCommands = ''
|
boot.initrd.extraUtilsCommands = ''
|
||||||
|
Loading…
Reference in New Issue
Block a user