stockholm/makefu/2configs/fs/sda-crypto-root.nix

36 lines
924 B
Nix
Raw Normal View History

2015-08-07 10:10:02 +00:00
{ config, lib, pkgs, ... }:
# sda: bootloader grub2
2016-06-12 17:43:50 +00:00
# sda1: boot ext4 (label nixboot) - must be unlocked on boot if required:
# boot.initrd.luks.devices = [ { name = "luksroot"; device = "/dev/sda2"; allowDiscards=true; }];
2015-08-07 10:10:02 +00:00
# sda2: cryptoluks -> ext4
# fdisk /dev/sda
# boot 500M
# rest rest
# cryptsetup luksFormat /dev/sda2
#
2016-10-20 18:54:38 +00:00
with import <stockholm/lib>;
2015-08-07 10:10:02 +00:00
{
boot = {
loader.grub.enable = true;
loader.grub.version = 2;
2016-06-12 17:43:50 +00:00
loader.grub.device = lib.mkDefault "/dev/sda";
2015-08-07 10:10:02 +00:00
initrd.luks.cryptoModules = ["aes" "sha512" "sha1" "xts" ];
initrd.availableKernelModules = ["xhci_hcd" "ehci_pci" "ahci" "usb_storage" ];
};
fileSystems = {
"/" = {
device = "/dev/mapper/luksroot";
fsType = "ext4";
options = [ "defaults" "discard" ];
2015-08-07 10:10:02 +00:00
};
"/boot" = {
device = "/dev/disk/by-label/nixboot";
fsType = "ext4";
options = [ "defaults" "discard" ];
2015-08-07 10:10:02 +00:00
};
};
}