motiejus
/
config
1
Fork 0
Code Packages Releases Activity

fwminex: enable tpm2 unlock

This commit is contained in:
Motiejus Jakštys 2024-08-28 08:09:36 +03:00
parent 5dd533cf34
commit 7594f32c7a
1 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/fwminex/configuration.nix
View File

@ -40,6 +40,7 @@ in
kernelModules = [ "kvm-intel" ]; kernelModules = [ "kvm-intel" ];
loader.systemd-boot.enable = true; loader.systemd-boot.enable = true;
initrd = { initrd = {
systemd.enable = true;
kernelModules = [ "usb_storage" ]; kernelModules = [ "usb_storage" ];
availableKernelModules = [ availableKernelModules = [
"xhci_pci" "xhci_pci"
@ -48,22 +49,15 @@ in
"usbhid" "usbhid"
"tpm_tis" "tpm_tis"
]; ];
systemd.enableTpm2 = true;
luks.devices = { luks.devices = {
luksroot = { luksroot = {
device = "${nvme}-part3"; device = "${nvme}-part3";
allowDiscards = true; allowDiscards = true;
#crypttabExtraOpts = ["tpm2-device=auto"];
keyFileOffset = 9728;
keyFileSize = 512;
keyFile = "/dev/sda";
}; };
}; };
}; };
}; };
security.tpm2.enable = true;
swapDevices = [ swapDevices = [
{ {
device = "${nvme}-part2"; device = "${nvme}-part2";