Add encrypted root to hephaestus

This commit is contained in:
Dave Gallant
2021-05-02 08:14:40 -04:00
parent ccca19a8ba
commit fc3d3d2c08

View File

@@ -9,18 +9,24 @@
boot.kernelModules = [ "kvm-amd" ];
boot.extraModulePackages = [ ];
boot.initrd.luks.devices.luksroot = {
allowDiscards = true;
device = "/dev/disk/by-uuid/570a2b97-3310-4784-9138-6e09037cea17";
preLVM = true;
};
fileSystems."/" = {
device = "/dev/disk/by-uuid/d3079c84-11b2-4c2b-bf9e-5a067854a21d";
device = "/dev/disk/by-uuid/8cfaf3d2-1cae-48b0-a37b-6c192f0b2680";
fsType = "ext4";
};
fileSystems."/boot" = {
device = "/dev/disk/by-uuid/CEF0-328B";
device = "/dev/disk/by-uuid/2368-A8CE";
fsType = "vfat";
};
swapDevices =
[{ device = "/dev/disk/by-uuid/39a775f9-e5b8-4029-875a-1df6d99cad5c"; }];
[{ device = "/dev/disk/by-uuid/aca92a73-2941-40ca-88c4-0dd8607d232a"; }];
# high-resolution display
hardware.video.hidpi.enable = lib.mkDefault true;