colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos.luksroot: fix assertion message to name correct option

Browse Source
This commit is contained in:
Jade Lovelace 2024-03-05 13:38:38 -08:00
parent e09d2ff9da
commit a72afcbc48
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
nixos/modules/system/boot/luksroot.nix
View File

@ -982,8 +982,10 @@ in
}
{ assertion = config.boot.initrd.systemd.enable -> !luks.fido2Support;
message = ''
systemd stage 1 does not support configuring FIDO2 unlocking through `boot.initrd.luks.devices.<name>.fido2`.
Use systemd-cryptenroll(1) to configure FIDO2 support.
systemd stage 1 does not support configuring FIDO2 unlocking through `boot.initrd.luks.fido2Support`.
Use systemd-cryptenroll(1) to configure FIDO2 support, and set
`boot.initrd.luks.devices.''${DEVICE}.crypttabExtraOpts` as appropriate per crypttab(5)
(e.g. `fido2-device=auto`).
'';
}
# TODO