Enable swap random encryption
This commit is contained in:
parent
50d5f6b778
commit
1ec57a6dcc
@ -3,7 +3,6 @@ with rec {
|
|||||||
inherit (config) device deviceSpecific secrets;
|
inherit (config) device deviceSpecific secrets;
|
||||||
};
|
};
|
||||||
with deviceSpecific; {
|
with deviceSpecific; {
|
||||||
boot.resumeDevice = "/dev/mapper/cryptswap";
|
|
||||||
fileSystems = {
|
fileSystems = {
|
||||||
"/" = {
|
"/" = {
|
||||||
options = if isSSD then
|
options = if isSSD then
|
||||||
@ -70,16 +69,11 @@ with deviceSpecific; {
|
|||||||
};
|
};
|
||||||
swapDevices = [
|
swapDevices = [
|
||||||
{
|
{
|
||||||
device = "/dev/mapper/cryptswap";
|
device = if device == "Dell-Laptop" then
|
||||||
encrypted = {
|
"/dev/disk/by-partuuid/2de40bc4-a91c-4c89-a2cd-cbf34a0adf01"
|
||||||
enable = true;
|
|
||||||
keyFile = "/mnt-root/root/swap.key";
|
|
||||||
label = "cryptswap";
|
|
||||||
blkDev = if device == "Dell-Laptop" then
|
|
||||||
"/dev/disk/by-uuid/c623d956-d0ea-4626-8e0c-5092bbbf3b0c"
|
|
||||||
else
|
else
|
||||||
"";
|
"";
|
||||||
};
|
randomEncryption.enable = true;
|
||||||
}
|
}
|
||||||
];
|
];
|
||||||
}
|
}
|
Loading…
x
Reference in New Issue
Block a user