| 27 Mar 2025 |
 matthewcroughan | does disko work with systemd-cryptenroll too? | 14:51:24 |
| matthewcroughan | https://github.com/nix-community/disko/issues/709
https://github.com/nix-community/disko/issues/492 | 14:55:56 |
| matthewcroughan | looks like no | 14:56:01 |
| matthewcroughan | Marie: in your disko config, you tell luks to have a settings.keyFile, is there no passphrase interactive option? | 16:37:17 |
| matthewcroughan | ...
settings = {
allowDiscards = true;
keyFile = "/encryption-keys/root.key";
};
...
| 16:37:22 |
| matthewcroughan | zfs native encryption seems to have that, for example | 16:37:30 |
 Marie | systemd should automatically prompt for that if you use a passphrase | 16:38:59 |
| matthewcroughan | Oh, do you just specify to use a passphrase somewhere in the settings ? | 16:39:48 |
| matthewcroughan | same as zfs? | 16:39:53 |
| Marie | you can use askPassword or passwordFile in settings | 16:39:53 |
| matthewcroughan | oh nice! | 16:39:59 |
| matthewcroughan | are these module options in disko, or are they options for luks itself? | 16:40:10 |
| matthewcroughan | looks like module options in disko | 16:40:30 |
