use tpm to encrypt drives

This commit is contained in:
Rouven Seifert 2023-02-18 19:33:05 +01:00
parent f923077cf9
commit fca5f7a167
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
2 changed files with 10 additions and 9 deletions

View file

@ -13,6 +13,7 @@
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
boot.initrd.systemd.enable = true;
boot.initrd.luks.devices."luksroot" = {
device = "/dev/disk/by-uuid/6b89181c-71e0-4e84-8523-2456d3e28400";
allowDiscards = true;