!JQvnJacrwKgtkGHYHO:matrix.org

NixOS + Framework

228 Members
Discussing NixOS in the context of the Framework laptop52 Servers

Load older messages


SenderMessageTime
10 May 2026
@albertlarsan68:albertlarsan.frAlbert LarsanI have hibernation working with impermanence on btrfs in lvm in luks (and my hibernate swap is in the lvm too) on my fw 13. It even works with secure boot!12:34:47
@rajil:rajils.comtrumeeDo i need to setup a swap file or a swap partition for hibernation?13:02:22
@rajil:rajils.comtrumeeFilesystem of my choice is ZFS but hiberanation doesnt work on it.13:02:44
@rajil:rajils.comtrumeethis soungs good. are there any instructions anywhere which i can follow?13:06:35
@rajil:rajils.comtrumee* this sounds good. are there any instructions anywhere which i can follow?13:06:42
@michael.zeagler:matrix.orgJust Some DudeShould be an option if you’re using the installer right?13:26:35
@albertlarsan68:albertlarsan.frAlbert Larsan There is boot.resumeDevice option if you have a swap partition (which is easier) 13:40:42
@albertlarsan68:albertlarsan.frAlbert LarsanIf you can manage to navigate the mess that are my dotfiles, you can look at the spruce-frame host at https://git.sr.ht/~albertlarsan68/dotfiles TMDU: The disk is crypted by luks. Inside luks there is a lvm PV. The VG contains two LVs: A 64-gig swap (for hibernation) and the rest is my btrfs volume. Standard-ish Impermanence setup, just made sure that the script that cleans up the root only runs once resume has been attempted.13:49:03
@sudoforge:matrix.orgsudoforgeah, fair. hibernation on a zvol is a bad idea (although technically still... possible)13:52:06
@sudoforge:matrix.orgsudoforgeyou'd just need to patch the kernel to address the missing support :P13:53:05
@sudoforge:matrix.orgsudoforge are you using disko to configure your disk, by chance? 13:54:07
@sudoforge:matrix.orgsudoforge * 13:57:30
@rajil:rajils.comtrumeeno i am not using disko atm. 14:00:11
@rajil:rajils.comtrumeeI am currently using ZFS, but planning to migrate since i need hibernation.14:00:51
@sudoforge:matrix.orgsudoforge well, the good news is that a separate swap partition would work fine, and can be encrypted (if you do that), so you can continue using ZFS as your main filesystem. 14:05:07
@albertlarsan68:albertlarsan.frAlbert LarsanNote that having multiple LUKS containers on a single system has… complications.14:06:01
@sudoforge:matrix.orgsudoforge others have already addressed what you need to do, but i'd be happy to provide additional clarification if needed. 14:06:00
@sudoforge:matrix.orgsudoforge i haven't found that to be the case at all. 14:06:35
@albertlarsan68:albertlarsan.frAlbert LarsanI have auto-unlock with TPM on my server machines, and getting that to behave was a journey14:07:22
@sudoforge:matrix.orgsudoforge i have passphrase fallback, and use clevis + tang for my servers. 14:08:11
@albertlarsan68:albertlarsan.frAlbert LarsanAnd typing two unlock passphrases at boot is annoying too (especially on a laptop)14:08:31
@sudoforge:matrix.orgsudoforge you only need to do that if the passphrase differs. 14:08:54
@albertlarsan68:albertlarsan.frAlbert LarsanHaving swap and storage live in the same lvm vg is nice to be able to modulate size between the two without having to resize the luks containers (which is a royal pain IME)14:11:37
@albertlarsan68:albertlarsan.frAlbert LarsanI was trying to unlock a data disk with a keyfile on the main (tpm-unlocked) disk, but I abandonned this and went to unlock both disks with the tpm instead.14:12:41
@sudoforge:matrix.orgsudoforgeah, neat. my servers all have passphrase fallback, which i can administer through IMPI, but primarily boot and decrypt the disks using clevis and tang, requiring 2 of 2: TPM, and the tang server14:14:27
@sudoforge:matrix.orgsudoforge * 14:15:45
@albertlarsan68:albertlarsan.frAlbert LarsanI use laptops for servers, so no IPMI. There is ssh-based passphrase fallback, but it requires me to notice that the host is down, find a way to connect to its initrd ssh, and remember the correct command to ask systemd to prompt me the password.14:15:52
@albertlarsan68:albertlarsan.frAlbert LarsanI use systemd-crypt{setup,enroll}, not clevis though14:16:57
@rajil:rajils.comtrumeeI am not sure if hibernate is safe with zfs, https://github.com/openzfs/zfs/issues/1284214:18:20
@rajil:rajils.comtrumeealso, https://github.com/NixOS/nixpkgs/blob/93de6bf9ed923bf2d0991db61c2fd127f6e984ae/nixos/modules/tasks/filesystems/zfs.nix#L229-L23614:20:12

Show newer messages


Back to Room ListRoom Version: 10