colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #293591 from lf-/jade/fix-luksroot-assert

Browse Source 
nixos.luksroot: fix assertion message to name correct option
This commit is contained in:
Will Fancher 2024-03-18 17:46:11 -04:00 committed by GitHub
commit 57f69255d7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
nixos/modules/system/boot/luksroot.nix
View File

@ -982,8 +982,10 @@ in
}
{ assertion = config.boot.initrd.systemd.enable -> !luks.fido2Support;
message = ''
systemd stage 1 does not support configuring FIDO2 unlocking through `boot.initrd.luks.devices.<name>.fido2`.
Use systemd-cryptenroll(1) to configure FIDO2 support.
systemd stage 1 does not support configuring FIDO2 unlocking through `boot.initrd.luks.fido2Support`.
Use systemd-cryptenroll(1) to configure FIDO2 support, and set
`boot.initrd.luks.devices.''${DEVICE}.crypttabExtraOpts` as appropriate per crypttab(5)
(e.g. `fido2-device=auto`).
'';
}
# TODO