Enable swap random encryption

This commit is contained in:
Dmitriy Holkin 2019-09-25 02:44:22 +04:00
parent 50d5f6b778
commit 1ec57a6dcc

View File

@ -3,7 +3,6 @@ with rec {
inherit (config) device deviceSpecific secrets; inherit (config) device deviceSpecific secrets;
}; };
with deviceSpecific; { with deviceSpecific; {
boot.resumeDevice = "/dev/mapper/cryptswap";
fileSystems = { fileSystems = {
"/" = { "/" = {
options = if isSSD then options = if isSSD then
@ -70,16 +69,11 @@ with deviceSpecific; {
}; };
swapDevices = [ swapDevices = [
{ {
device = "/dev/mapper/cryptswap"; device = if device == "Dell-Laptop" then
encrypted = { "/dev/disk/by-partuuid/2de40bc4-a91c-4c89-a2cd-cbf34a0adf01"
enable = true;
keyFile = "/mnt-root/root/swap.key";
label = "cryptswap";
blkDev = if device == "Dell-Laptop" then
"/dev/disk/by-uuid/c623d956-d0ea-4626-8e0c-5092bbbf3b0c"
else else
""; "";
}; randomEncryption.enable = true;
} }
]; ];
} }