Talk: Remote disk unlocking

From NixOS Wiki
Jump to: navigation, search

Hi folks, thanks for the article. I followed it and managed to set up remote disk unlocking successfully.

I noticed one little gotcha: The shell has to be configured slightly differently[^1]. Should be:

 boot.initrd.network.ssh.shell = "/bin/cryptsetup-askpass";

Instead of:

 boot.initrd.systemd.users.root.shell = "/bin/cryptsetup-askpass";

The mentioned config does not seem to have any effect.

This seems have been changed on purpose[^2] but I as said, it has no effect on nixos-unstable as of today. Note that I'm not using an initrd based on systemd.


[^1]: https://search.nixos.org/options?channel=24.05&show=boot.initrd.network.ssh.shell&from=0&size=50&sort=relevance&type=packages&query=boot.initrd.network.ssh.shell

[^2]: https://nixos.wiki/index.php?title=Remote_disk_unlocking&diff=11313&oldid=11251


@St3iny: If you feel that your way is better/correct/correct (at least for current unstable) I'd say just go ahead and edit the article to reflect it 👍

--Fadenb (talk) 15:12, 12 October 2024 (UTC)