use tpm to encrypt drives

This commit is contained in:
Rouven Seifert 2023-02-18 19:33:05 +01:00
parent f923077cf9
commit fca5f7a167
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
2 changed files with 10 additions and 9 deletions

View file

@ -47,11 +47,11 @@
"xdph": "xdph" "xdph": "xdph"
}, },
"locked": { "locked": {
"lastModified": 1676630258, "lastModified": 1676682541,
"narHash": "sha256-pc3aIr2LgmJFcTQwICpz3d4/u5/xHDI14qY/zEhGM3k=", "narHash": "sha256-ltfODM3ZvqygHqbglHoiMO7Qxmdi2Z1tzVtRfXDE//0=",
"owner": "hyprwm", "owner": "hyprwm",
"repo": "Hyprland", "repo": "Hyprland",
"rev": "be2e4d9dd1e58991a4f54078a331cbcbd8265c7f", "rev": "b944386ca54cf650d660caac31f065c0211168b1",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -88,11 +88,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1676406424, "lastModified": 1676681260,
"narHash": "sha256-G+JhFuaeB15MTU8DbJALm/Yf240FCQmrWZ8Y0UzyqRI=", "narHash": "sha256-R2FvbPzgvDSVs0jCUA9CMDIgw4F6exF8cR+y3Yea5jQ=",
"owner": "hyprwm", "owner": "hyprwm",
"repo": "hyprpaper", "repo": "hyprpaper",
"rev": "1d76f4db0d3b487b9a9562195815e181652aef7c", "rev": "2bc88dc8c220db674f458432aec0ac0d9ea6a640",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -122,11 +122,11 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1676481215, "lastModified": 1676569297,
"narHash": "sha256-afma/1RU0EePRyrBPcjBdOt+dV8z1bJH9dtpTN/WXmY=", "narHash": "sha256-2n4C4H3/U+3YbDrQB6xIw7AaLdFISCCFwOkcETAigqU=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "28319deb5ab05458d9cd5c7d99e1a24ec2e8fc4b", "rev": "ac1f5b72a9e95873d1de0233fddcb56f99884b37",
"type": "github" "type": "github"
}, },
"original": { "original": {

View file

@ -13,6 +13,7 @@
boot.initrd.kernelModules = [ ]; boot.initrd.kernelModules = [ ];
boot.kernelModules = [ "kvm-intel" ]; boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [ ];
boot.initrd.systemd.enable = true;
boot.initrd.luks.devices."luksroot" = { boot.initrd.luks.devices."luksroot" = {
device = "/dev/disk/by-uuid/6b89181c-71e0-4e84-8523-2456d3e28400"; device = "/dev/disk/by-uuid/6b89181c-71e0-4e84-8523-2456d3e28400";
allowDiscards = true; allowDiscards = true;